Vulnerability Management Analyst — SC Cleared

Methods Business and Digital Technology; Portsmouth; On-site; GBP 42,000 - 65,000; Full time

Benefits offered by this job

Pension salary exchange scheme

Private Medical Insurance

Life Assurance

Travel Insurance

Annual leave 25 days + bank holidays

Volunteer days

Job summary

Methods is seeking an experienced Vulnerability Management Analyst to provide governance-focused support across the end-to-end lifecycle, ensuring Cyber Essentials Plus compliance in a secure enterprise environment.

You will collaborate with infrastructure, service providers, asset owners and security stakeholders to coordinate remediation activities, validate coverage and escalate risks. This role emphasizes ownership and reporting over hands-on remediation.

Qualifications

• Experience in vulnerability management within a large enterprise or regulated environment.
• Experience analysing, prioritising and tracking remediation programmes.
• Good understanding of Cyber Essentials Plus requirements and vulnerability governance processes.
• Experience utilising CMDB platforms and asset inventories to validate coverage and identify ownership.
• Knowledge of ITSM and ticketing tools, ideally Remedy.
• Experience creating and maintaining Splunk dashboards and security reporting.

Responsibilities

• Execute and validate vulnerability scans using Tenable/Nessus platforms.
• Verify scan coverage against CMDB and asset inventory records.
• Review, prioritise and manage Critical and High vulnerabilities in line with Cyber Essentials Plus requirements.
• Coordinate remediation ownership across internal teams, MSPs and third-party stakeholders.
• Raise, maintain and track remediation tickets using Remedy or equivalent ITSM tools.
• Investigate unidentified asset ownership and resolve coverage gaps.
• Monitor remediation progress and maintain a clear audit trail of actions and communications.
• Escalate overdue vulnerabilities through governance, risk acceptance and deviation processes.
• Produce weekly vulnerability management and compliance reports.
• Maintain KPI reporting covering ticket volumes, remediation performance and compliance metrics.
• Create and enhance reporting dashboards using Splunk and Excel.
• Provide updates and support during regular Cyber Essentials Plus governance meetings.
• Coordinate ongoing management of Medium and Low vulnerabilities through monthly review cycles.
• Engage with infrastructure, security and service delivery teams to drive remediation activity and maintain compliance.

Skills

Vulnerability management

Governance

Stakeholder management

Cyber Essentials Plus knowledge

Risk & remediation planning

Tools

Tenable Security Center

Nessus

Remedy

CMDB platforms

Splunk

Job description

Methods is seeking an experienced Vulnerability Management Analyst to provide governance-focused support across the end-to-end lifecycle, ensuring Cyber Essentials Plus compliance in a secure enterprise environment.

You will collaborate with infrastructure, service providers, asset owners and security stakeholders to coordinate remediation activities, validate coverage and escalate risks. This role emphasizes ownership and reporting over hands-on remediation.