Vulnerability Management Analyst

Harvey Nash Group; Havant; Hybrid; GBP 92,000 - 111,000; Full time

Job summary

Harvey Nash Group is seeking a Vulnerability Management Analyst to support governance across a large enterprise environment. You will review, challenge and approve vulnerability exception requests and ensure robust remediation plans with clear accountability.

The role is hybrid to Havant, inside IR35, offering a daily rate of £500–£600 on a six-month contract, with governance reporting to support risk decisions.

Qualifications

• Must have strong understanding of vulnerability management, cyber risk, exposure assessment and risk management principles.
• Experience assessing, prioritising and managing vulnerability remediation activities.
• Ability to govern vulnerability exceptions with business needs and security risk in balance.
• Experience producing risk reporting, governance updates and management information.

Responsibilities

• Review, challenge and approve vulnerability exception requests with robust business justification and defined remediation plans.
• Maintain oversight of active exceptions, track risk exposure, ageing and business ownership.
• Provide governance and reporting to support informed risk decisions.

Skills

Vulnerability management

Cyber risk

Risk management

Remediation

Governance

Risk reporting

Threat intelligence

Security risk assessment

Stakeholder engagement

Tools

Qualys

Job description

We're looking for a Vulnerability Management Analyst to support the management of vulnerability exceptions and strengthen governance across a large enterprise environment.

• Inside of IR35, daily rate of £500 - £600
• Hybrid to Havant
• 6 month contract

Key responsibilities will include reviewing, challenging and approving vulnerability exception requests, ensuring robust business justification, clear accountability, and defined remediation plans are in place. You'll maintain oversight of active exceptions, tracking risk exposure, ageing, and business ownership while providing governance and reporting to support informed risk decisions.

Key Requirements

• Strong understanding of vulnerability management, cyber risk, exposure assessment, and risk management principles.
• Experience assessing, prioritising, and managing vulnerability remediation activities.
• Ability to review and govern vulnerability exceptions, balancing business needs with security risk.
• Experience producing risk reporting, governance updates, and management information.
• Knowledge of threat intelligence, vulnerability advisories, and security risk assessment methodologies.
• Experience with Qualys is highly desirable.
• Strong stakeholder engagement skills with the ability to challenge constructively and influence decision-making.