Vulnerability Management Consultant

Experis Austria; Blackburn; On-site; GBP 67,000 - 112,000; Full time

Job summary

ManpowerGroup is seeking a Vulnerability Management Consultant to operate within an SIAM governance framework. The role focuses on coordinating vulnerability management across suppliers, tracking remediation progress, and producing visibility reports. The position is 5 months long with a daily rate up to £607 (umbrella) and requires SC clearance.

Work is 5 days onsite in Inverness or Preston. The role does not perform technical remediation; it ensures governance, evidence, and audit readiness

Qualifications

• Experience in cyber security, information security, service management, or governance roles.
• Understanding of vulnerability management principles.
• Knowledge of CVSS, KEV and basic vulnerability risk concepts.
• Ability to track risk, remediation progress and reporting.

Responsibilities

• Support monitoring of vulnerabilities from identification through closure.
• Maintain and update vulnerability records with suppliers.
• Assist in tracking remediation progress against SLAs.
• Escalate overdue or high-risk vulnerabilities through governance channels.
• Coordinate with suppliers to obtain status updates and reports.
• Ensure consistency in reporting formats and data standards.
• Produce routine vulnerability management reports and dashboards.
• Help identify aging vulnerabilities, recurring issues, SLA breaches and trends.
• Support adherence to vulnerability management processes and evidence for audits.

Skills

Cyber security

Governance

Vulnerability management

CVSS/KEV

Risk ratings

Remediation tracking

Stakeholder management

Analytics & reporting

Job description

Vulnerability Management Consultant
Duration: 5 months
Pay: up to £607 per day (umbrella)
Location: Inverness or Preston, 5 days onsite
Clearance Required: SC cleared sole UK national

Role Summary

The Vulnerability Management Consultant operates within the Operational Integrator (OI) function in a multi-supplier (SIAM) environment, supporting the governance and coordination of vulnerability management activities across suppliers.
The role assists in ensuring vulnerabilities are identified, tracked, prioritised, and reported in accordance with client policies and agreed remediation timelines. Working with suppliers, service teams and security stakeholders, the consultant provides visibility of vulnerability status and supports the maintenance of accurate reporting and audit evidence.
This is a governance and coordination role and does not perform vulnerability scanning, security testing, patch deployment, or technical remediation activities.
If you are successfully offered this position, you will go through a series of pre-employment checks, including identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service)

Key Responsibilities

• Support the monitoring of vulnerabilities from identification through to closure
• Ensure vulnerability records are maintained and updated by suppliers
• Assist in tracking remediation progress against agreed service levels
• Escalate overdue or high-risk vulnerabilities through agreed governance channels

Supplier Engagement (SIAM Model)

• Coordinate with suppliers to obtain vulnerability status updates
• Support the collection and validation of supplier vulnerability reports
• Ensure reporting formats and data standards are applied consistently
• Identify gaps in vulnerability information, ownership, or reporting

Vulnerability Reporting & Visibility

• Produce routine vulnerability management reports
• Support development of dashboards and metrics
• Assist in identifying:
• Aging vulnerabilities
• Recurring issues
• SLA breaches
• Emerging vulnerability trends

Governance & Process Compliance

• Support adherence to agreed vulnerability management processes
• Ensure supplier activities align with client policies and standards
• Assist with documenting risk acceptance and exception processes
• Maintain evidence required for audits and assurance activities

Assurance & Evidence Support

• Collect and organise vulnerability management evidence
• Support compliance and assurance reviews
• Maintain audit-ready documentation and reporting records
• Assist in demonstrating process effectiveness to stakeholders

Key Skills & Experience
Essential

• Experience in cyber security, information security, service management, or governance roles
• Understanding of vulnerability management principles
• Knowledge of basic vulnerability risk concepts including:
• CVSS, KEV etc
• Risk ratings
• Remediation tracking
• Strong analytical and reporting skills
• Experience working with multiple stakeholders

Desirable

• Exposure to SIAM or multi-supplier environments
• Familiarity with vulnerability management tooling and reporting outputs
• Understanding of cyber security governance and assurance
• Experience in regulated or defence environments

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.

JBRP1_UKTJ