Vulnerability Management Lead – SIAM & Cyber Security

Supply Chain Corporation; Nottingham; Hybrid; GBP 55,000 - 67,000; Full time

Benefits offered by this job

Hybrid working

Annual bonus

Training and qualifications support

Well-being day

Generous pension

Flexible benefits scheme

Volunteer leave

Discounts

Job summary

NHS Supply Chain is seeking a Vulnerability Manager to lead the Vulnerability Management Service. The role drives identification, assessment, prioritisation, remediation, and reporting of cyber vulnerabilities across the technology estate, with governance across multiple providers.

Based in Nottingham with hybrid work (two days on site). A 6-month fixed term contract with a starting salary of £60,994, and a focus on regulatory compliance and operational resilience.

Qualifications

• Strong leadership and influencing skills.
• Excellent supplier and stakeholder management capabilities.
• Strong analytical and risk assessment skills.
• Ability to communicate technical cyber risks to non-technical audiences.
• Excellent reporting and presentation skills.
• Ability to challenge constructively and drive accountability.

Responsibilities

• Own and develop the organisation's Vulnerability Management Strategy, Framework, Policies and Standards.
• Lead the delivery and continuous improvement of vulnerability management capabilities across the organisation.
• Drive governance processes covering vulnerability identification, assessment, prioritisation, remediation, exception management and reporting.
• Act as Service Owner for Vulnerability Management within the SIAM model.
• Coordinate activities across multiple service providers to ensure effective identification and remediation of vulnerabilities.
• Hold suppliers accountable for delivery against agreed vulnerability remediation targets and contractual obligations

Skills

Leadership

Stakeholder management

Analytical thinking

Communicating cyber risk

Reporting and presentation

Accountability

Organisation and prioritisation

Education

CISSP

CISM

CRISC

GIAC

ITIL Foundation

SIAM Foundation

ISO 27001 Lead Auditor/Lead Implementer

CAF knowledge

Job description

NHS Supply Chain is seeking a Vulnerability Manager to lead the Vulnerability Management Service. The role drives identification, assessment, prioritisation, remediation, and reporting of cyber vulnerabilities across the technology estate, with governance across multiple providers.

Based in Nottingham with hybrid work (two days on site). A 6-month fixed term contract with a starting salary of £60,994, and a focus on regulatory compliance and operational resilience.