Vulnerability Management Analyst

Harvey Nash; Reading; Hybrid; GBP 33,000 - 65,000; Full time

Benefits offered by this job

Hybrid working

Contract role (6 months)

Job summary

Harvey Nash is seeking a Vulnerability Management Analyst for a six‑month contract in the UK. The role focuses on governing vulnerability exceptions and strengthening governance across a large enterprise environment. Hybrid working in Havant and a daily rate of £500–£600 are offered.

The position emphasizes remediation oversight, risk reporting, and stakeholder engagement to drive informed risk decisions within an inside IR35 framework.

Qualifications

• Strong vulnerability management experience and risk assessment background.
• Experience prioritising and managing vulnerability remediation activities.
• Ability to govern vulnerability exceptions with business context.

Responsibilities

• Review and approve vulnerability exception requests with clear remediation plans.
• Oversee active exceptions, track risk exposure and ownership.
• Provide governance and reporting to support risk decisions.

Skills

Vulnerability management

Cyber risk

Exposure assessment

Risk management principles

Vulnerability remediation

Qualys

Stakeholder engagement

Tools

Qualys

Job description

Salary: £33,000 - 65,000 per year

Requirements:

• Strong understanding of vulnerability management, cyber risk, exposure assessment, and risk management principles
• Experience assessing, prioritising, and managing vulnerability remediation activities
• Ability to review and govern vulnerability exceptions, balancing business needs with security risk
• Experience producing risk reporting, governance updates, and management information
• Knowledge of threat intelligence, vulnerability advisories, and security risk assessment methodologies
• Experience with Qualys is highly desirable
• Strong stakeholder engagement skills, with the ability to challenge constructively and influence decision‑making

Responsibilities:

• Review, challenge, and approve vulnerability exception requests, ensuring robust business justification, clear accountability, and defined remediation plans
• Maintain oversight of active exceptions, tracking risk exposure, ageing, and business ownership
• Provide governance and reporting to support informed risk decisions

Technologies:

• Support
• Security

More:

Were looking for a Vulnerability Management Analyst to support the management of vulnerability exceptions and strengthen governance across a large enterprise environment. This is a six-month contract, inside IR35, with a daily rate of £500–£600 and hybrid working in Havant.

last updated 40 week of 2026