Vulnerability Response Manager

Deutsche Bank AG; Birmingham; Hybrid; GBP 80,000 - 120,000; Full time

Benefits offered by this job

Hybrid Working model

Competitive salary and non-contributy?

Job summary

Deutsche Bank in Birmingham seeks a Vulnerability Response Manager to lead the organisation's vulnerability response and remediation of serious vulnerabilities, coordinating across infrastructure, cloud, application and technology teams while ensuring compliance with internal policies and regulatory requirements.

You will drive remediation within SLAs, prioritise based on severity and threat intelligence, report to senior stakeholders, and contribute to a broad security program through effective

Qualifications

• Significant experience in Vulnerability Management, Cyber Security Operations, or Cyber Defence.
• Strong understanding of vulnerability scoring methodologies such as CVSS.
• Experience managing technology risk and remediation governance.
• Exposure to regulatory environments such as NIST SP 800-40, DORA, FCA/PRA requirements, ISO 27001 and NIST Cybersecurity Framework.
• Proven ability to leverage AI tools to enhance productivity while applying responsible and ethical use of data and AI outputs.

Responsibilities

• Managing the end-to-end serious vulnerability response and remediation lifecycle.
• Prioritising vulnerabilities based on severity, exploitability, business criticality, and threat intelligence.
• Leading and managing vulnerability remediation activities across global technology teams.
• Ensuring critical and high-risk vulnerabilities are remediated within agreed SLAs.
• Driving accelerated response activities for actively exploited and zero-day vulnerabilities.
• Producing management information and executive reporting.

Skills

Vulnerability management

Cyber security operations

Cyber defence

CVSS knowledge

Regulatory frameworks

AI in security

Job description

Job Title

Vulnerability Response Manager

Location

Birmingham

The Vulnerability Response Manager leads the organisation's vulnerability response and remediation of serious vulnerabilities, ensuring vulnerabilities are rapidly identified, assessed, prioritised, remediated, and governed.

The role is responsible for reducing cyber risk exposure by coordinating remediation efforts across infrastructure, cloud, application, and technology teams while ensuring compliance with internal policies, regulatory requirements, and remediation SLAs.

What we’ll offer you

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its centre.

You can expect:

• Hybrid Working - we understand that employee expectations and preferences are changing. We have implemented a model that enables eligible employees to work remotely for a part of their working time and reach a working pattern that works for them
• Competitive salary and non-contributory pension
• 30 days’ holiday plus bank holidays, with the option to purchase additional days
• Life Assurance and Private Healthcare for you and your family
• A range of flexible benefits including Retail Discounts, a Bike4Work scheme and Gym benefits
• The opportunity to support a wide ranging CSR programme + 2 days’ volunteering leave per year

Your key responsibilities

• Managing the end-to-end serious vulnerability response and resolution lifecycle
• Prioritising vulnerabilities based on severity, exploitability, business criticality, and threat intelligence
• Leading and managing vulnerability remediation activities across global technology teams
• Ensuring critical and high-risk vulnerabilities are remediated within agreed SLAs
• Driving accelerated response activities for actively exploited and zero-day vulnerabilities
• Producing management information and executive reporting

Your skills and experience

• Significant experience in Vulnerability Management, Cyber Security Operations, or Cyber Defence
• Strong understanding of vulnerability scoring methodologies such as CVSS
• Experience managing technology risk and remediation governance
• Exposure to regulatory environments such as NIST SP 800-40, DORA, FCA/PRA requirements, ISO 27001 and NIST Cybersecurity Framework
• Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs

How we’ll support you

• Training and development to help you excel in your career
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• We value diversity and as an equal opportunities’ employer, we make reasonable adjustments for those with a disability such as the provision of assistive equipment if required (e.g. screen readers, assistive hearing devices, adapted keyboards)

Please note the expected salary for some roles may be below the minimum level requirements to support candidates who require a Skilled Worker visa to work in the UK. Should you already have a Skilled Worker visa and are identified for a role, we can discuss and support you with the process.

About us

Deutsche Bank is the leading German bank with strong European roots and a global network. Click here to see what we do.

If you have a disability, health condition, or require any adjustments during the application process, we encourage you to contact our Adjustments Concierge on [e-mail] to discuss.

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.
Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.
We welcome applications from all people and promote a positive, fair and inclusive work environment.