Vulnerability Management Lead | Cyber Security & SIAM

Supply Chain Coordination Limited; Nottingham; Hybrid; GBP 55,000 - 67,000; Full time

Benefits offered by this job

Hybrid working opportunities

Annual bonus schemes

Well-being leave

Pension contribution

Training and professional development

Job summary

NHS Supply Chain in Nottingham is seeking a Vulnerability Manager to lead and continuously improve the Vulnerability Management Service, ensuring vulnerabilities are identified, assessed, prioritized, remediated and reported in a timely, risk-based manner across the technology estate.

Working within a SIAM operating model, you will oversee multiple providers, act as the authority for vulnerability management, and drive governance across identification, remediation and reporting while supporting

Qualifications

• Strong leadership and influencing skills.
• Excellent supplier and stakeholder management capabilities.
• Strong analytical and risk assessment skills.
• Ability to communicate technical cyber risks to non-technical audiences.
• Excellent reporting and presentation skills.
• Ability to challenge constructively and drive accountability.
• Strong organisational and prioritisation skills.

Responsibilities

• Own and develop the organisation’s Vulnerability Management Strategy, Framework, Policies and Standards.
• Lead the delivery and continuous improvement of vulnerability management capabilities across the organisation.
• Drive governance processes covering vulnerability identification, assessment, prioritisation, remediation, exception management and reporting.
• Act as Service Owner for Vulnerability Management within the SIAM model.
• Coordinate activities across multiple service providers to ensure effective identification and remediation of vulnerabilities.
• Hold suppliers accountable for delivery against agreed vulnerability remediation targets and contractual obligations

Job description

NHS Supply Chain in Nottingham is seeking a Vulnerability Manager to lead and continuously improve the Vulnerability Management Service, ensuring vulnerabilities are identified, assessed, prioritized, remediated and reported in a timely, risk-based manner across the technology estate.

Working within a SIAM operating model, you will oversee multiple providers, act as the authority for vulnerability management, and drive governance across identification, remediation and reporting while supporting