Vulnerability Risk & Governance Analyst (Hybrid)

Harvey Nash Group; Havant; Hybrid; GBP 92,000 - 111,000; Full time

Job summary

Harvey Nash Group is seeking a Vulnerability Management Analyst to support governance across a large enterprise environment. You will review, challenge and approve vulnerability exception requests and ensure robust remediation plans with clear accountability.

The role is hybrid to Havant, inside IR35, offering a daily rate of £500–£600 on a six-month contract, with governance reporting to support risk decisions.

Qualifications

• Must have strong understanding of vulnerability management, cyber risk, exposure assessment and risk management principles.
• Experience assessing, prioritising and managing vulnerability remediation activities.
• Ability to govern vulnerability exceptions with business needs and security risk in balance.
• Experience producing risk reporting, governance updates and management information.

Responsibilities

• Review, challenge and approve vulnerability exception requests with robust business justification and defined remediation plans.
• Maintain oversight of active exceptions, track risk exposure, ageing and business ownership.
• Provide governance and reporting to support informed risk decisions.

Skills

Vulnerability management

Cyber risk

Risk management

Remediation

Governance

Risk reporting

Threat intelligence

Security risk assessment

Stakeholder engagement

Tools

Qualys

Job description

Harvey Nash Group is seeking a Vulnerability Management Analyst to support governance across a large enterprise environment. You will review, challenge and approve vulnerability exception requests and ensure robust remediation plans with clear accountability.

The role is hybrid to Havant, inside IR35, offering a daily rate of £500–£600 on a six-month contract, with governance reporting to support risk decisions.