489703 - Higher Vulnerability Manager - Police and Public Protection Technology Portfolio (PPPT) in London

• Higher Vulnerability Manager - Police and Public Protection Technology Portfolio (PPPT)

The Police and Public Protection Technology (PPPT) Portfolio delivers high-profile national programmes, bringing together civil servants, consultants and contractors to design and deliver digital services that support Home Office missions within Digital and Innovation.

The Vulnerability Management team is responsible for triaging vulnerabilities according to their relevance and criticality, identifying mitigations, and advising on their implementation.

As a Higher Vulnerability Manager, you will join a team of cyber security professionals dedicated to reducing exposure to cyber threats across new and existing digital systems, supported by a collaborative culture and commitment to professional development.

As a Higher Vulnerability Manager you will be responsible for identifying, assessing and managing vulnerabilities across infrastructure, applications, cloud environments and network services.

This includes conducting vulnerability assessments using approved security tools, onboarding and maintaining assets within vulnerability management platforms, and monitoring the organisation’s vulnerability landscape.

You will analyse vulnerabilities, assess severity, exploitability and business impact, and provide risk-based remediation recommendations.

Working with technical teams, system owners, suppliers and senior stakeholders, you will coordinate remediation activities, monitor service levels and ensure risks remain within organisational tolerance.

You will maintain documentation, risk assessments and remediation records, produce dashboards, metrics and reports, and support governance, compliance and audits.

The role also provides advice on patching, system hardening and secure configuration, ensuring alignment with Threat and Vulnerability Management policies and contributing to improved cyber resilience and security posture.

• As a Higher Vulnerability Manager, your main responsibilities will be;
• Vulnerability Identification – Utilise various vulnerability management tools and technologies effectively to identify, assess and report on vulnerabilities.
• Vulnerability Assessment – Analyse the results of vulnerability scans to determine the severity and potential impact of identified vulnerabilities, categorising them based on risk to the organisations assets and operations.
• Remediation Support – Collaborate with multiple departments, technical teams and senior stakeholders to recommend remediation plans and complex configuration changes in support of vulnerability remediation.
• Reporting – Maintain through documentation of vulnerability assessments, findings and remediation efforts to support compliance and reporting requirements.

Support the creation of reports for stakeholders, management and technical teams.

• Incident Management – Work closely with other security teams and technical resolver groups to ensure comprehensive approach to managing prioritised vulnerabilities.
• Tool management – Supporting different technical approaches and utilising various tooling and technologies to perform vulnerability assessments against large and complex infrastructure.
• Vulnerability Management Service - Support the onboarding of assets into the appropriate vulnerability management tooling in line with the Threat and Vulnerability Management Service.

Ensure that vulnerability management activities align with service polices, standards and procedures.

Essential Skills Working in an information security, cyber security or information assurance discipline or in the delivery of technology-based projects.

Involvement in applying techniques to improve operational processes.

Communicating in a verbal and written manner, and a good understanding of the use of different channels and formats for different audiences.

Building partnerships with peers across an organisation, 3rd party suppliers, and other teams.

Risk and controls frameworks: NIST, ISO27001, COBIT, Cyber Essentials/ Defence Controls, NCSC guidelines and/or threat analysis models and frameworks: STi X, Cyber Kill Chain, Diamond Model etc.

Vulnerability research, malware analysis and exploit investigation, especially within Home Office, Cabinet Office, NCSC.

• Essential Skills Working in an information security, cyber security or information assurance discipline or in the delivery of technology-based projects.
• Involvement in applying techniques to improve operational processes.
• Communicating in a verbal and written manner, and a good understanding of the use of different channels and formats for different audiences.
• Building partnerships with peers across an organisation, 3rd party suppliers, and other teams.
• Risk and controls frameworks: NIST, ISO27001, COBIT, Cyber Essentials/ Defence Controls, NCSC guidelines and/or threat analysis models and frameworks: STi X, Cyber Kill Chain, Diamond Model etc.
• Vulnerability research, malware analysis and exploit investigation, especially within Home Office, Cabinet Office, NCSC.
• Proud member of the Disability Confident employer scheme

About Disability Confident Disability Confident is a government scheme. It encourages employers to recruit and retain disabled people and those with long term health conditions.

Company: Government Recruitment Service Salary: from £45,750 a year Hours: Full-time Location: London Working pattern: Hybrid - 2 days remote Job type: Permanent