Vulnerability Management Lead: Risk & Remediation

Capgemini; Inverness, Preston; Hybrid; GBP 70,000 - 95,000; Full time

Job summary

Capgemini in the UK is seeking a Vulnerability Manager to own the end-to-end vulnerability management framework across client environments. Based in Inverness or Preston with hybrid onsite requirements, you will coordinate with Security Operations and CIS teams to identify, assess, and remediate vulnerabilities.

The role emphasizes governance, supplier management, and reporting to senior leaders, leveraging Tenable and other industry standards such as NIST CSF and ISO 27001 to reduce risk.

Qualifications

• Extensive experience in Vulnerability Management, governance, and risk-based remediation.
• Experience delivering security services in complex enterprise environments.
• Familiarity with NIST CSF, ISO 27001, and regulatory guidance.

Responsibilities

• Own and govern end-to-end vulnerability management framework.
• Lead supplier governance and performance management.
• Oversee vulnerability risk prioritisation using CVSS, EPSS, KEV.
• Deliver consolidated reporting and executive insights on posture.
• Assure end-to-end traceability and audit readiness; drive process maturity.

Skills

Vulnerability Management

Security Governance

GRC

Security Operations Governance

Stakeholder Management

Communication Skills

NIST CSF

ISO 27001

Secure by Design

Tools

Tenable

Qualys

Brinqa

Job description

Capgemini in the UK is seeking a Vulnerability Manager to own the end-to-end vulnerability management framework across client environments. Based in Inverness or Preston with hybrid onsite requirements, you will coordinate with Security Operations and CIS teams to identify, assess, and remediate vulnerabilities.

The role emphasizes governance, supplier management, and reporting to senior leaders, leveraging Tenable and other industry standards such as NIST CSF and ISO 27001 to reduce risk.