At a Glance
- Tasks: Coordinate and govern vulnerability management activities across suppliers in a dynamic team.
- Company: Join a leading firm focused on cyber security and governance.
- Benefits: Competitive daily rate, professional development, and a chance to work in a secure environment.
- Other info: Opportunity for career growth in a multi-supplier environment with diverse challenges.
- Why this job: Make a real impact in cyber security while enhancing your skills in a supportive team.
- Qualifications: Experience in cyber security or governance roles; strong analytical and reporting skills.
The predicted salary is between 63000 - 77000 £ per year.
This temporary contract is inside IR35 and will require working under the direction of the client delivery manager as part of a multi-disciplinary team. The successful candidate will follow established delivery processes and working practices.
Due to the secure nature of the position and working environment, you must have, or be eligible to obtain Security Clearance.
The Vulnerability Management Consultant operates within the Operational Integrator (OI) function in a multi-supplier (SIAM) environment, supporting the governance and coordination of vulnerability management activities across suppliers. The role supports the governance and visibility of vulnerability management activities across suppliers, ensuring risks are tracked, reported, and evidenced consistently without performing technical vulnerability remediation.
The role assists in ensuring vulnerabilities are identified, tracked, prioritised, and reported in accordance with client policies and agreed remediation timelines. Working with suppliers, service teams and security stakeholders, the consultant provides visibility of vulnerability status and supports the maintenance of accurate reporting and audit evidence.
This is a governance and coordination role and does not perform vulnerability scanning, security testing, patch deployment, or technical remediation activities.
Key Deliverables
- Vulnerability reporting packs
- Vulnerability status and remediation tracking
- Supplier vulnerability performance metrics
- Audit-ready evidence and reporting records
- Governance inputs to security forums
Vulnerability Tracking & Coordination
- Support the monitoring of vulnerabilities from identification through to closure
- Ensure vulnerability records are maintained and updated by suppliers
- Assist in tracking remediation progress against agreed service levels
- Escalate overdue or high-risk vulnerabilities through agreed governance channels
Supplier Engagement (SIAM Model)
- Coordinate with suppliers to obtain vulnerability status updates
- Support the collection and validation of supplier vulnerability reports
- Ensure reporting formats and data standards are applied consistently
- Identify gaps in vulnerability information, ownership, or reporting
Vulnerability Reporting & Visibility
- Produce routine vulnerability management reports
- Support development of dashboards and metrics
- Assist in identifying:
- Aging vulnerabilities
- Recurring issues
- SLA breaches
- Emerging vulnerability trends
Governance & Process Compliance
- Support adherence to agreed vulnerability management processes
- Ensure supplier activities align with client policies and standards
- Assist with documenting risk acceptance and exception processes
- Maintain evidence required for audits and assurance activities
Assurance & Evidence Support
- Collect and organise vulnerability management evidence
- Support compliance and assurance reviews
- Maintain audit-ready documentation and reporting records
- Assist in demonstrating process effectiveness to stakeholders
Your skills and experienceEssential
- Experience in cyber security, information security, service management, or governance roles
- Understanding of vulnerability management principles
- Knowledge of basic vulnerability risk concepts including: CVSS, KEV etc
- Risk ratings
- Remediation tracking
- Strong analytical and reporting skills
- Experience working with multiple stakeholders
Desirable
- Exposure to SIAM or multi-supplier environments
- Familiarity with vulnerability management tooling and reporting outputs
- Understanding of cyber security governance and assurance
- Experience in regulated or defence environments
Vulnerability Management Consultant in Preston employer: Damia Group Ltd
Damia Group is an excellent employer for IAM Support Engineers, offering a dynamic work environment in Inverness where you can thrive within a specialist team dedicated to securing critical identity and access management services. With a strong focus on employee growth, the company provides opportunities for professional development and skill enhancement, all while fostering a collaborative and inclusive culture that values diverse backgrounds and experiences.
StudySmarter Expert Advice🤫
We think this is how you could land Vulnerability Management Consultant in Preston
✨Get Engaged in Cybersecurity Communities
Dive into online forums or local meetups, like OWASP events or Cybersecurity conferences. These spaces are packed with pros who can share insights and might even know about temporary roles at places like Damia Group Ltd.
✨Showcase Your Skills Publicly
Link your GitHub or create a series of blogs sharing your knowledge on cybersecurity topics. It’s a great way to demonstrate your expertise and attract attention from hiring managers, especially when they see your passion in action.
✨Stay On Top of Temp Opportunities
Keep an eye on platforms that list temporary positions specifically in tech. Websites focusing on contract roles in cybersecurity can lead straight to employers like Damia Group Ltd.
✨Make Contact with Recruiters Specialising in Cybersecurity
Reach out to recruitment agencies that focus on cybersecurity roles. They often have insights into temporary roles before they’re advertised and can put your name forward to companies like Damia Group Ltd.
We think you need these skills to ace Vulnerability Management Consultant in Preston
Some tips for your application 🫡
Show Off Your Technical Skills:In cybersecurity, it's vital to highlight your skills with relevant tools and technologies. Make sure your CV showcases your experience with firewalls, intrusion detection systems, and any cybersecurity frameworks you've worked with. This gives Damia Group Ltd a clear view of your capabilities right off the bat.
Certifications Matter:If you’ve got any cybersecurity certifications, like CompTIA Security+ or CISSP, flaunt them! These not only validate your skills but also show that you’re committed to the field. Add a section to your CV specifically for this, because in a temporary role like this, those credentials can really set you apart.
Tailor Your Cover Letter to the Role:For a temporary position, we want to see your willingness to learn and adapt quickly. Make your cover letter specific to the role at Damia Group Ltd; mention why you’re excited about the opportunity and how it fits your career goals. A personal touch can make a big difference!
Don’t Forget the Soft Skills:In cybersecurity, technical skills are crucial, but so are soft skills like teamwork and communication. Make sure to weave examples of how you've collaborated with teams or communicated complex ideas into your application. This shows that you're not just a tech whizz but also a great team player, perfect for a temporary role at Damia Group Ltd.
How to prepare for a job interview at Damia Group Ltd
✨Brush Up on Technical Skills
Make sure you’re familiar with the latest cybersecurity tools and techniques, like firewalls, intrusion detection systems, and malware analysis. During the interview with Damia Group Ltd for the Vulnerability Management Consultant, be prepared to discuss specific scenarios where you tackled security threats or vulnerabilities.
✨Show Your Problem-Solving Prowess
Cybersecurity is all about thinking on your feet. Expect technical questions that require you to demonstrate your problem-solving abilities. You might be presented with a mock security breach scenario, so practising your responses to potential threats can be a game changer!
✨Demonstrate Your Adaptability
As this is a temporary role, showing that you're adaptable and quick to learn is crucial. Talk about times you've picked up new skills or reacted to changing situations quickly. Employers want to know you can hit the ground running and keep things secure during your short stay at Damia Group Ltd.
✨Bring Relevant Certifications
If you have any relevant cybersecurity certifications, like CompTIA Security+ or CEH, be sure to mention them. This can really help you stand out during a temporary hiring process, as it showcases your commitment to the field and your readiness to take on the Vulnerability Management Consultant role at Damia Group Ltd.
