Vulnerability Management Lead

ENGINEERINGUK

Corby

On-site

GBP 85,000 - 120,000

Full time

3 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

RS Group is seeking a Vulnerability Manager to lead the enterprise vulnerability management program across technology domains. You will drive remediation, governance, and reporting while coordinating across Infrastructure, Cloud, and security teams.

You will define policies, prioritise risk-based actions and report on trends and remediation performance to senior leadership. This role requires collaboration with suppliers and multi-vendor environments, with a focus on reducing risk.

Qualifications

Experience in vulnerability management, security operations, or threat intelligence.
Strong understanding of cyber risk, exploitability, and attack patterns.
Ability to interpret complex technical data and translate into business risk.
Familiarity with vulnerability tooling (e.g. scanners, EDR, threat intel platforms).
Strong stakeholder communication and influencing skills.
Understanding of vulnerability frameworks e.g. CVSS and Threat Intelligence.

Responsibilities

Own and drive the enterprise Vulnerability Management programme, ensuring vulnerabilities are identified, prioritised and remediated in line with risk-based frameworks.
Define and maintain vulnerability management policies, standards, processes and service level targets.
Review vulnerability risks, determine remediation priorities and manage risk acceptance and exception processes.
Coordinate remediation activities across Infrastructure, Cloud, Networks, Applications, End User Computing and third-party suppliers, ensuring accountability and timely resolution.
Build strong relationships across Technology, Security, Risk and business teams, acting as the key point of contact for vulnerability governance and reporting.
Develop and present dashboards, KPIs and management reports, providing insight into vulnerability trends, risk exposure and remediation performance.
Support supplier security reviews and monitor third-party remediation activities where vulnerabilities impact business services.
Drive continuous improvement by identifying recurring security issues, enhancing controls and supporting the implementation of new vulnerability management capabilities and tooling.
Escalate significant cyber risks and emerging threats to senior stakeholders, ensuring appropriate governance and action is taken.

Skills

Vulnerability management

Security operations

Threat intelligence

Cyber risk

Stakeholder communication

CVSS understandings

Tools

Vulnerability scanners

EDR

Threat intel platforms

Job description

You will need to login before you can apply for a job.

View more categories View less categories Sector Supply Chain and Procurement Role Manager Contract Type Permanent Hours Full Time

Contract Type

Permanent

The Opportunity

The Vulnerability Manager is responsible for leading and coordinating the organisation's vulnerability management programme, ensuring security vulnerabilities are effectively prioritised, remediated and reported upon across all technology domains.

Working closely with the Vulnerability Analyst, Security Operations, Risk Management, Security Architecture and technology delivery teams, the Vulnerability Manager provides governance, oversight and accountability for vulnerability remediation activities. The role ensures vulnerabilities are managed in accordance with organisational risk appetite and regulatory requirements whilst driving continuous improvements in vulnerability management processes and risk reduction.

Unlike the Vulnerability Analyst, whose focus is the identification and technical assessment of vulnerabilities, the Vulnerability Manager is accountable for driving remediation outcomes, coordinating stakeholders and providing visibility of vulnerability risk across the enterprise.

What You'll Be Doing

Own and drive the enterprise Vulnerability Management programme, ensuring vulnerabilities are identified, prioritised and remediated in line with risk-based frameworks.
Define and maintain vulnerability management policies, standards, processes and service level targets.
Review vulnerability risks, determine remediation priorities and manage risk acceptance and exception processes.
Coordinate remediation activities across Infrastructure, Cloud, Networks, Applications, End User Computing and third-party suppliers, ensuring accountability and timely resolution.
Build strong relationships across Technology, Security, Risk and business teams, acting as the key point of contact for vulnerability governance and reporting.
Develop and present dashboards, KPIs and management reports, providing insight into vulnerability trends, risk exposure and remediation performance.
Support supplier security reviews and monitor third-party remediation activities where vulnerabilities impact business services.
Drive continuous improvement by identifying recurring security issues, enhancing controls and supporting the implementation of new vulnerability management capabilities and tooling.
Escalate significant cyber risks and emerging threats to senior stakeholders, ensuring appropriate governance and action is taken.

Essential Skills & Experience

Experience in vulnerability management, security operations, or threat intelligence
Strong understanding of cyber risk, exploitability, and attack patterns
Ability to interpret complex technical data and translate into business risk
Familiarity with vulnerability tooling (e.g. scanners, EDR, threat intel platforms)
Strong stakeholder communication and influencing skills
Understanding of vulnerability frameworks e.g. CVSS and Threat Intelligence

Desired Skills & Experience

Knowledge of ITIL processes
Operating in a structured programme environment (agile and waterfall)
Experience working in complex multi-vendor environments
Experience with vulnerability tooling
Experience within a global organisation, containing different operating companies

We Are RS

At RS, we are making amazing happen for a better world.

As a global product and service solutions provider, we help industrial customers operate more efficiently and sustainably. Operating in 33 markets, we support around one million customers worldwide with more than 875,000 stocked products, access to over five million additional products, and a range of service solutions designed to help businesses thrive.

What sets us apart is our people. More than 8,500 colleagues around the world bring technical expertise, digital innovation, and a customer first mindset to everything we do. Guided by our values - we are one team, we deliver brilliantly, we do the right thing, and we make every day better, we're creating an environment where our people can grow, contribute and make a meaningful impact.

Join us and help make amazing happen.

Rewards

Our Reward Strategy Philosophy is designed to offer market competitive base salaries and provide all of our people the opportunity to participate in a short-term incentive, enabling them to share in the success of the Company.

Our total reward package is more than just the cash; our recognition and benefit offering provide the opportunity for us to recognise, reward and enable the wellbeing of our people at all stages of their journey with RS. Our rewards and benefits vary by country, but include:

Financial - pension/retirement; life assurance; salary finance (payroll deduction loan scheme)

Wellbeing - medical plans; health screening; critical illness; disability insurance; holiday / paid time off; employee assistance programme; discounted gym/health club membership