Vulnerability Management Lead – Hybrid

Supply Chain Coordination Limited; Brighton; Hybrid; GBP 61,000 - 72,000; Full time

Benefits offered by this job

Hybrid working

Annual bonus schemes

In-house training & external quals

Well-being leave

Pension scheme

Flexible Benefits Scheme

Volunteer leave

NHS Discounts

Job summary

NHS Supply Chain is seeking a Vulnerability Manager to lead and continuously improve its Vulnerability Management Service. You will oversee governance across multiple providers, drive remediation and reporting, and act as Service Owner within the SIAM model.

The role focuses on protecting critical services, meeting regulatory requirements, and strengthening operational resilience while collaborating with CSSP and infrastructure teams.

Qualifications

• Strong leadership and influencing skills.
• Excellent supplier and stakeholder management capabilities.
• Strong analytical and risk assessment skills.
• Ability to communicate cyber risks to non-technical audiences.
• Excellent reporting and presentation skills.
• Ability to challenge constructively and drive accountability.
• Strong organisational and prioritisation skills.

Responsibilities

• Own and develop vulnerability management strategy, framework, policies and standards.
• Lead delivery and continuous improvement of vulnerability management capabilities.
• Drive governance across vulnerability identification, assessment, remediation and reporting.
• Act as Service Owner for Vulnerability Management within the SIAM model.
• Coordinate activities across multiple service providers for effective remediation.
• Hold suppliers accountable for remediation targets and contractual obligations.

Skills

Leadership

Supplier management

Analytical skills

Risk assessment

Communicating cyber risk

Reporting & presentation

Organisation & prioritisation

Education

CISSP

CISM

CRISC

GIAC

ITIL Foundation

SIAM Foundation

ISO 27001 Lead Auditor/Lead Implementer

CAF knowledge

Job description

NHS Supply Chain is seeking a Vulnerability Manager to lead and continuously improve its Vulnerability Management Service. You will oversee governance across multiple providers, drive remediation and reporting, and act as Service Owner within the SIAM model.

The role focuses on protecting critical services, meeting regulatory requirements, and strengthening operational resilience while collaborating with CSSP and infrastructure teams.