Vunerability Manager - DV Cleared

CBSbutler Holdings Limited trading as CBSbutler; Corsham; Hybrid; GBP 101,000 - 111,000; Full time

Job summary

CBSbutler Holdings Limited trading as CBSbutler seeks an experienced Vulnerability Management Lead to drive enterprise vulnerability management within a secure MOD/Defence environment. You will own frameworks, coordinate remediation, monitor compliance and deliver board‑level reporting.

The role requires hands‑on experience with Tanium or Elastic, a deep understanding of CVSS, and exposure to major cyber security incidents.

Qualifications

• Experience leading vulnerability management programmes.
• DV security clearance is required.
• Experience in MOD/Defence environments is highly desirable.

Responsibilities

• Lead and maintain enterprise vulnerability management frameworks, policies, standards and procedures.
• Coordinate vulnerability identification, assessment, prioritisation and remediation across systems.
• Manage and optimise vulnerability management technologies, notably Tanium and Elastic.
• Apply CVSS and MOD risk processes to assess and prioritise vulnerabilities.
• Coordinate remediation activities, track SLAs and KPIs, escalate risks when needed.
• Produce board packs, dashboards and executive risk reports for senior stakeholders.
• Support governance, accreditation and assurance in vulnerability management.
• Contribute to cyber risk governance via governance groups and boards.
• Participate in major cyber security incident management and post‑incident reviews.
• Assist root cause analysis and corrective action implementation.
• Correlate threat intel with vulnerability data to improve monitoring and detection.

Skills

Vulnerability management leadership

DV clearance

Cyber risk governance

Incident management experience

Board‑level reporting

Tools

Tanium

Elastic

Job description

Vulnerability Manager

12 months

hybrid Corsham

DV cleared role

Inside IR35

£550 - £600 a day

We are seeking an experienced Vulnerability Management Lead to drive enterprise vulnerability management and cyber risk reduction within a secure MOD/Defence environment.

The successful candidate will have a strong background in vulnerability management leadership, with hands-on exposure to tools such as Tanium or Elastic, a thorough understanding of CVSS and remediation governance, and experience supporting major cyber security incidents.

You will take ownership of vulnerability management frameworks, coordinate remediation activities, monitor compliance and produce board-level reporting to support cyber risk decisions. Experience working within MOD, Defence Digital or Strategic Command environments is highly desirable.

Key Responsibilities

• Lead and maintain enterprise vulnerability management frameworks, policies, standards and procedures, driving continuous improvement.
• Coordinate vulnerability identification, assessment, prioritisation and remediation across enterprise systems and services.
• Manage and optimise vulnerability management technologies, particularly Tanium and Elastic, alongside other relevant security tools.
• Apply CVSS and established MOD cyber risk management processes to assess, prioritise and manage vulnerabilities.
• Coordinate remediation activities, track progress against agreed SLAs and KPIs, and escalates outstanding risks.
• Produce board packs, vulnerability dashboards, risk reports and executive briefings for senior stakeholders and governance forums.
• Support vulnerability management governance, compliance, accreditation and assurance activities.
• Contribute to vulnerability management boards, security working groups and wider cyber risk governance.
• Participate in the management of major cyber security incidents, including technical assessments of vulnerability exploitation.
• Support root cause analysis, post-incident reviews and the implementation of corrective actions.
• Correlate threat intelligence with vulnerability data and contribute to improvements in security monitoring and detection capabilities.

Essential Skills & Experience

• Current, valid DV security clearance.
• Proven experience in a Vulnerability Management Lead, Vulnerability Manager or equivalent senior vulnerability management role.
• Experience using enterprise vulnerability management and assessment tools, particularly Tanium or Elastic.
• Strong understanding of CVSS, vulnerability prioritisation, remediation governance and cyber risk management.
• Experience working within the MOD, Defence Digital or a similar Defence environment.
• Proven ability to produce board-level packs, management information, risk reports and executive briefings.
• Experience participating in cyber security incident management, including major or significant incidents.
• Experience coordinating remediation activities and managing vulnerability-related risks across complex enterprise environments.