At a Glance
- Tasks: Lead our Vulnerability Management Programme and protect against cyber threats.
- Company: Join the Financial Ombudsman Service, a vital player in UK financial services.
- Benefits: Enjoy flexible working, health plans, gym memberships, and generous holiday entitlement.
- Other info: Diverse, inclusive culture with excellent career growth opportunities.
- Why this job: Make a real impact in strengthening our cyber resilience and driving meaningful change.
- Qualifications: Strong knowledge of vulnerability management and hands-on experience with leading VM platforms.
The predicted salary is between 53833 - 65000 £ per year.
Looking for a new challenge? Take a look at our current vacancies. If you see a vacancy that is right for you, we encourage you to apply!
Join a team where Purpose drives everything we do, Ambition fuels our growth, Respect shapes our culture and Trust builds our foundation. We're not just hiring we’re building a team that thrives in a fast-paced, ever-changing environment. If you’re at your best when juggling priorities, thinking on your feet, and delivering under pressure, this is your opportunity to make a real impact.
Contract: Permanent
Working hours: 35 hours per week is full time. Where possible, we are open to considering part time/flexible working patterns. Please let us know in your application your desired working pattern.
Reporting to: Information and Cyber Security lead
Salary: Range is between £53,833 - £65,000 for London location; Range is between £47,470 - £57,701 for other locations
Location: We can consider candidates who wish to work in London, Cardiff, Manchester, Coventry or Edinburgh.
By joining our team, you'll enjoy the best of both worlds hybrid working and the collaboration of a great office environment. Our permanent hybrid policy sees us all working at least four days across a fortnight in the office, as well as extensive opportunities for personal and career development.
About Us: The Financial Ombudsman Service is an independent, not-for-profit organisation that plays a vital role in UK financial services. Every day we help resolve disputes between consumers, or small businesses, and their financial service providers. Join us at the Financial Ombudsman Service and play a pivotal role in strengthening our cyber resilience.
What You’ll Do: You’ll lead and shape the Financial Ombudsman Service’s end-to-end Vulnerability Management Programme, owning how we identify, assess and reduce cyber risk across the organisation. Sitting within the Information and Cyber Security function, you’ll work closely with technical teams and business stakeholders to embed strong governance, drive accountability and ensure vulnerabilities are effectively prioritised and remediated. You’ll bring structure, insight and clear reporting to the programme translating complex risk into meaningful action for both technical teams and senior leadership. This is a role for someone who thrives on challenge and wants to make a visible impact. You’ll be at the centre of strengthening our cyber resilience driving improvements in how we manage risk, influence decision-making and respond to an evolving threat landscape. With ownership of key vulnerability tools like Qualys and the opportunity to shape processes, automation and maturity, you’ll have the platform to lead meaningful change while working across a complex organisation. If you’re motivated by responsibility, influence and the chance to elevate a critical cyber function, this is a role where you can truly make your mark.
Minimum Criteria:
- Strong knowledge of vulnerability management frameworks, Vulnerability lifecycle processes and risk-based prioritisation models
- Strong demonstrable hands-on experience with leading VM platforms e.g. Qualys, Tenable, Rapid 7, Microsoft Defender for Cloud. Knowledge of exploitability analysis, CVSS scoring and integration of threat intelligence feeds.
- Proven experience engaging technical, business and governance teams to drive remediation accountability
- Knowledge of relevant cybersecurity standards, regulations, and frameworks (e.g., NIST, SOC 2, ISO 27001, Cyber Essentials etc.)
It would also be nice for you to have:
- Ability to communicate technical concepts to non-technical stakeholders, including executives and procurement colleagues
- Strong analytical and problem-solving skills, with a keen eye for detail
- Ability to manage multiple projects and prioritise tasks effectively
- Excellent written and verbal communication skills, with the ability to write clear, concise reports
Why You'll Love Working With Us: We are a values led organisation. Our values define our culture, influence our decisions, and underpin our vision and strategy. They set out how we play our PART through Purpose, Ambition, Respect and Trust.
We also offer an attractive, competitive salary and flexible benefits to suit our people. Here’s a list of some of the many benefits and perks you can get for working with us:
- 25 days holiday entitlement, with the option to buy extra or sell days
- Generous pension
- Various Family Friendly Policies, including enhanced maternity pay, carers and dependants leave
- Employer provided benefits such as Private medical insurance, virtual GP, Critical illness cover, Life assurance cover, to name a few
- Choice of voluntary benefits including Technology scheme, Cycle to work scheme, Will-writing service amongst others
- Gym membership discounts, and a fully equipped on-site gym open 24/7 in London only
Let’s Make This Easy: To be considered for this opportunity, please complete the questionnaire and upload a copy of your CV by Midnight on Monday 15th June 2026. Due to high application numbers this advert may end earlier than the date specified, so please don't delay and apply now!
The Financial Ombudsman is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all team members. We view diversity as fundamental to our success and welcome applications from underrepresented groups across all communities.
Don’t miss out be part of the journey and take advantage of this opportunity.
Vulnerability Management Lead employer: Financial Ombudsman
At the Financial Ombudsman Service, we pride ourselves on being a values-led organisation that fosters a culture of Purpose, Ambition, Respect, and Trust. Our London office offers a dynamic hybrid working environment, extensive personal and career development opportunities, and a commitment to employee wellbeing through generous benefits such as health plans, gym memberships, and flexible working arrangements. Join us to make a meaningful impact in strengthening our cyber resilience while enjoying a collaborative and inclusive workplace.
StudySmarter Expert Advice🤫
We think this is how you could land Vulnerability Management Lead
✨Tip Number 1
Network like a pro! Reach out to your connections on LinkedIn or attend industry events. You never know who might have the inside scoop on job openings or can put in a good word for you.
✨Tip Number 2
Prepare for interviews by researching the company and its culture. Understand their values, especially around Purpose, Ambition, Respect, and Trust. This will help you align your answers with what they’re looking for.
✨Tip Number 3
Practice makes perfect! Conduct mock interviews with friends or use online platforms. The more comfortable you are speaking about your experience and skills, the better you'll perform when it counts.
✨Tip Number 4
Don’t forget to apply through our website! It’s the quickest way to get your application noticed. Plus, we love seeing candidates who take the initiative to engage directly with us.
We think you need these skills to ace Vulnerability Management Lead
Some tips for your application 🫡
Tailor Your CV:Make sure your CV reflects the skills and experiences that align with the Vulnerability Management Lead role. Highlight your hands-on experience with VM platforms and any relevant frameworks to catch our eye!
Craft a Compelling Cover Letter:Use your cover letter to tell us why you're passionate about vulnerability management. Share specific examples of how you've tackled challenges in the past and how you can contribute to our mission at the Financial Ombudsman Service.
Showcase Your Communication Skills:Since you'll be engaging with both technical and non-technical stakeholders, it's crucial to demonstrate your ability to communicate complex concepts clearly. Use your application to show us how you can bridge the gap between tech and business.
Apply Through Our Website:We encourage you to apply directly through our website for a smoother process. It helps us keep track of your application and ensures you don’t miss out on any important updates!
How to prepare for a job interview at Financial Ombudsman
✨Know Your Vulnerability Management Frameworks
Make sure you brush up on your knowledge of vulnerability management frameworks and lifecycle processes. Be ready to discuss how you've applied these in past roles, especially with tools like Qualys or Tenable. This will show that you’re not just familiar with the theory but have practical experience too.
✨Communicate Clearly with Stakeholders
Since this role involves engaging with both technical and non-technical teams, practice explaining complex concepts in simple terms. Think about examples where you've successfully communicated risk assessments or remediation strategies to stakeholders who may not have a technical background.
✨Demonstrate Your Problem-Solving Skills
Prepare to share specific examples of how you've tackled challenges in vulnerability management. Highlight your analytical skills and how you've prioritised tasks effectively under pressure. This will help illustrate your ability to thrive in a fast-paced environment.
✨Show Your Passion for Cybersecurity
Let your enthusiasm for cybersecurity shine through during the interview. Discuss any recent trends or emerging threats you've been following, and how they relate to the role. This will demonstrate your commitment to staying ahead in the field and your desire to make a real impact.
