Vulnerability Management Analyst

Methods Business and Digital Technology; Portsmouth; On-site; GBP 42,000 - 65,000; Full time

Benefits offered by this job

Pension salary exchange scheme

Private Medical Insurance

Life Assurance

Travel Insurance

Annual leave 25 days + bank holidays

Volunteer days

Job summary

Methods is seeking an experienced Vulnerability Management Analyst to provide governance-focused support across the end-to-end lifecycle, ensuring Cyber Essentials Plus compliance in a secure enterprise environment.

You will collaborate with infrastructure, service providers, asset owners and security stakeholders to coordinate remediation activities, validate coverage and escalate risks. This role emphasizes ownership and reporting over hands-on remediation.

Qualifications

• Experience in vulnerability management within a large enterprise or regulated environment.
• Experience analysing, prioritising and tracking remediation programmes.
• Good understanding of Cyber Essentials Plus requirements and vulnerability governance processes.
• Experience utilising CMDB platforms and asset inventories to validate coverage and identify ownership.
• Knowledge of ITSM and ticketing tools, ideally Remedy.
• Experience creating and maintaining Splunk dashboards and security reporting.

Responsibilities

• Execute and validate vulnerability scans using Tenable/Nessus platforms.
• Verify scan coverage against CMDB and asset inventory records.
• Review, prioritise and manage Critical and High vulnerabilities in line with Cyber Essentials Plus requirements.
• Coordinate remediation ownership across internal teams, MSPs and third-party stakeholders.
• Raise, maintain and track remediation tickets using Remedy or equivalent ITSM tools.
• Investigate unidentified asset ownership and resolve coverage gaps.
• Monitor remediation progress and maintain a clear audit trail of actions and communications.
• Escalate overdue vulnerabilities through governance, risk acceptance and deviation processes.
• Produce weekly vulnerability management and compliance reports.
• Maintain KPI reporting covering ticket volumes, remediation performance and compliance metrics.
• Create and enhance reporting dashboards using Splunk and Excel.
• Provide updates and support during regular Cyber Essentials Plus governance meetings.
• Coordinate ongoing management of Medium and Low vulnerabilities through monthly review cycles.
• Engage with infrastructure, security and service delivery teams to drive remediation activity and maintain compliance.

Skills

Vulnerability management

Governance

Stakeholder management

Cyber Essentials Plus knowledge

Risk & remediation planning

Tools

Tenable Security Center

Nessus

Remedy

CMDB platforms

Splunk

Job description

Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK.

Our mission is to improve and safeguard public-facing services. We apply digital thinking to ensure the future of our public services is centered around our citizens. Our human touch sets us apart from other consultancies, system integrators and software houses - we have a customer-centric value system whereby we focus on delivering what is right for our clients.

We passionately support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them.

Methods are experts in delivering secure, resilient cyber and information services – keeping systems and data safe. We help reduce risk and vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks.

Role:

We are seeking an experienced Vulnerability Management Analyst to provide operational support across the end-to-end vulnerability management lifecycle, ensuring compliance with Cyber Essentials Plus requirements within a highly secure enterprise environment.

Working closely with infrastructure teams, service providers, asset owners and security stakeholders, you will be responsible for coordinating vulnerability remediation activities, validating coverage, tracking progress and escalating compliance risks. This is a governance-driven role focused on ownership, reporting, escalation and stakeholder management rather than hands-on remediation.

• Execute and validate vulnerability scans using Tenable/Nessus platforms.
• Verify scan coverage against CMDB and asset inventory records.
• Review, prioritise and manage Critical and High vulnerabilities in line with Cyber Essentials Plus requirements.
• Coordinate remediation ownership across internal teams, managed service providers and third-party stakeholders.
• Raise, maintain and track vulnerability remediation tickets using Remedy or equivalent ITSM tools.
• Investigate unidentified asset ownership and resolve coverage gaps.
• Monitor remediation progress and maintain a clear audit trail of actions and communications.
• Escalate overdue vulnerabilities through established governance, risk acceptance and deviation processes.
• Produce weekly vulnerability management and compliance reports.
• Maintain KPI reporting covering ticket volumes, remediation performance and compliance metrics.
• Create and enhance reporting dashboards using Splunk and Excel.
• Provide updates and support during regular Cyber Essentials Plus governance meetings.
• Coordinate ongoing management of Medium and Low vulnerabilities through monthly review cycles.
• Engage with infrastructure, security and service delivery teams to drive remediation activity and maintain compliance.

Essential Skills & Experience

• Strong vulnerability management experience within a large enterprise or regulated environment.
• Hands-on experience with:
• Tenable Security Center
• Nessus
• Vulnerability scanners and agent management platforms
• Experience analysing, prioritising and tracking vulnerability remediation programmes.
• Good understanding of Cyber Essentials Plus requirements and vulnerability governance processes.
• Experience utilising CMDB platforms and asset inventories to validate coverage and identify ownership.
• Knowledge of ITSM and ticketing tools, ideally Remedy.
• Experience creating and maintaining Splunk dashboards and security reporting.

Desired Skills

• Experience working within Defence, Government or other highly regulated environments.
• Knowledge of vulnerability management best practices and security compliance frameworks.
• Familiarity with risk acceptance and exception management processes.
• Experience working with outsourced service providers and managed service organisations.
• Understanding of enterprise infrastructure, server and workstation estate management.

Security & Location Requirements

• Active SC Clearance is mandatory.
• Must be willing and able to work full-time onsite.
• Successful candidates must be comfortable working within a secure operational environment.

Methods is passionate about its people; we want our colleagues to develop the things they are good at and enjoy.

By joining us you can expect

• Autonomy to develop and grow your skills and experience
• Be part of exciting project work that is making a difference in society
• Strong, inspiring and thought-provoking leadership
• A supportive and collaborative environment

Development – access to LinkedIn Learning, a management development programme, and training

Wellness – 24/7 confidential employee assistance programme

Social – office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays, and commitment to charitable causes

Time Off – 25 days of annual leave a year, plus bank holidays, with the option to buy 10 extra days each year

Volunteering – 2 paid days per year to volunteer in our local communities or within a charity organisation

Pension – Salary Exchange Scheme with 4% employer contribution and 5% employee contribution

Life Assurance – of 4 times base salary

Private Medical Insurance – which is non-contributory (spouse and dependants included)

Worldwide Travel Insurance – which is non-contributory (spouse and dependants included)

Enhanced Maternity and Paternity Pay

Travel – season ticket loan, cycle to work scheme

For a full list of benefits please visit our website www.methods.co.uk/careers/benefits