Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead the identification and remediation of security vulnerabilities to protect our organisation.
- Company: Join a fast-growing FTSE 250 company dedicated to enhancing retirement experiences.
- Benefits: Enjoy competitive salary, private medical cover, and generous annual leave plus birthday day off.
- Why this job: Make a real impact while developing your career in a supportive and innovative environment.
- Qualifications: Bachelor’s degree in Cyber Security or related field and 5 years of relevant experience required.
- Other info: Flexible working options and a strong commitment to diversity and inclusion.
The predicted salary is between 43200 - 72000 £ per year.
We help people achieve a better later life. That’s our purpose and it’s the reason we exist. We are a fast-growing FTSE 250 company helping customers enjoy the retirement they deserve. We do this through a variety of market leading, award-winning products and services, delivered by a diverse team of over 1,400 purpose-led colleagues who genuinely put the customer at the heart of everything we do.
This is a brilliant time to join our business. We are on an exciting growth journey to become the UK’s most loved retirement expert.
Purpose
The Vulnerability Manager is responsible for leading the identification, assessment, and remediation of security vulnerabilities across the organization\’s estate. This role is crucial for maintaining an effective vulnerability management program, which is a key requirement under ISO27001.
The Vulnerability Manager provides regular reporting to demonstrate control effectiveness, reduces the attack surface, and supports informed decision-making, helping the business stay ahead of emerging threats.
Job Accountabilities
Develop and implement a comprehensive vulnerability management program in alignment with ISO27001 standards.
Lead the identification, assessment, and prioritization of security vulnerabilities across the organization\’s systems and networks.
Coordinate with IT and security teams to remediate identified vulnerabilities in a timely and effective manner.
Conduct regular vulnerability scans and assessments to ensure continuous monitoring and improvement.
Provide regular reporting on vulnerability management activities, including metrics and key performance indicators (KPIs).
Stay updated with the latest security vulnerabilities, threats, and trends to proactively address potential risks.
Collaborate with other security and IT teams to ensure a cohesive approach to vulnerability management.
Support incident response activities by providing expertise on vulnerabilities and potential attack vectors.
Examples of Key Activities
Conduct regular vulnerability assessments and penetration testing to identify security weaknesses.
Develop and implement strategies to mitigate identified vulnerabilities.
Monitor and analyse security alerts and reports to detect potential threats.
Collaborate with IT and security teams to ensure timely resolution of vulnerabilities.
Maintain up-to-date knowledge of emerging threats and vulnerabilities.
Prepare and present reports on vulnerability management activities to senior management.
Coordinate with external security vendors and consultants for specialized assessments.
Ensure compliance with industry standards and regulatory requirements.
Train and educate staff on best practices for vulnerability management.
Develop and maintain documentation related to vulnerability management processes and procedures.
Experience, Skills and Knowledge
Bachelor’s degree in Cyber Security, Information Technology, Computer Science, or a related field is essential
Professional certifications such as CISSP, CISM, or CompTIA Security+ is required
Minimum of 5 years of experience in vulnerability management or a closely related field.
Demonstrated expertise in identifying, assessing, and remediating security vulnerabilities.
Hands-on experience conducting vulnerability scans and assessments using industry-standard tools.
Proven ability to produce clear, concise, and regular reporting on vulnerability management activities.
Strong collaboration skills with cross-functional teams, including IT and security stakeholders
In-depth understanding of ISO 27001 standards and industry best practices in vulnerability management
Strong analytical and problem-solving abilities
Excellent communication and interpersonal skills
Proactive, results-driven, and highly self-motivated
Able to manage multiple priorities and perform well under pressure
Committed to continuous improvement and ongoing professional development
Solid technical expertise in all aspects of vulnerability management
Company Benefits
A Competitive Salary, Pension Scheme and Life Assurance
Along with 25 Days Annual Leave plus an Additional Day on us for your Birthday
Private Medical Cover and Income Protection, just in case
A generous and highly achievable bonus scheme – paid annually based on individual and company performance against targets
Opportunity to progress within your career both in-role and within the company
FREE access to the Headspace App, a 24/7 Employee Assistance Helpline and Trained Physical & Mental Health First Aiders (On-Site)
A variety of Employee Funded Benefits available to you via our Online Benefits Portal
Plus, several additional purchase options available for you and your loved ones
Why Just?
At Just you’ll have the opportunity to develop your career, whilst making a difference to the lives of those around you. You’ll be part of a company with a strong and distinctiveculture – we’re ambitious, curious and collaborative – and every decision we make centres around being Just and delivering the best outcomes for our customers.
We’re committed to building a more sustainable business, and we’re working hard to make progress against ourNet Zero targets . We\’re reducing our reliance on fossil fuels in our offices, switching to more sustainable sources of energy and we\’re investing more of our money in green and social assets.
Valuing diversity of thought and fostering a sense of belonging is critical to our business success, driving innovation and balanced decision making. Our work onDEIB (Diversity, Equity, Inclusion and Belonging) aims to deliver a brilliant employee experience underpinned by a sense of belonging, where our people feel proud to work at Just. We remain committed to our publicly disclosed HM Treasury Women in Finance Charter and Race at Work Charter targets and support a wide range of employee network and events, championing issues including intergenerational working, social mobility and neurodiversity.
Be Bold. Be Brilliant. Be Just .
At Just we encourage a flexible and agile working environment for the majority of our opportunities. Get in touch with us to discuss in more detail.
#J-18808-Ljbffr
Vulnerability Manager employer: Just Group plc
Contact Detail:
Just Group plc Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Vulnerability Manager
✨Tip Number 1
Familiarise yourself with ISO 27001 standards, as this role heavily relies on compliance with these regulations. Understanding the nuances of these standards will not only help you in interviews but also demonstrate your commitment to maintaining security protocols.
✨Tip Number 2
Stay updated on the latest security vulnerabilities and trends in the industry. Follow relevant blogs, forums, and news outlets to ensure you can discuss current threats and solutions during your conversations with us.
✨Tip Number 3
Network with professionals in the cybersecurity field, especially those who have experience in vulnerability management. Engaging with others can provide insights into best practices and may even lead to referrals or recommendations for your application.
✨Tip Number 4
Prepare to discuss your hands-on experience with vulnerability scans and assessments. Be ready to share specific examples of tools you've used and how you've successfully identified and remediated vulnerabilities in past roles.
We think you need these skills to ace Vulnerability Manager
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights relevant experience in vulnerability management, particularly any roles where you've developed or implemented security programs. Use keywords from the job description to align your skills with what the company is looking for.
Craft a Compelling Cover Letter: In your cover letter, express your passion for cybersecurity and how your background aligns with the company's mission of helping customers enjoy their retirement. Mention specific achievements in vulnerability management that demonstrate your expertise.
Showcase Relevant Certifications: Clearly list any professional certifications such as CISSP, CISM, or CompTIA Security+ on your application. These credentials are essential for this role and will help you stand out as a qualified candidate.
Highlight Collaboration Skills: Since the role requires working with cross-functional teams, emphasise your collaboration skills in both your CV and cover letter. Provide examples of past experiences where you successfully worked with IT and security teams to address vulnerabilities.
How to prepare for a job interview at Just Group plc
✨Understand ISO27001 Standards
Make sure you have a solid grasp of ISO27001 standards, as this role heavily relies on them. Be prepared to discuss how you've implemented these standards in your previous roles and how they relate to vulnerability management.
✨Showcase Your Technical Skills
Highlight your hands-on experience with vulnerability scans and assessments. Be ready to talk about the tools you've used and any specific vulnerabilities you've identified and remediated in past positions.
✨Demonstrate Collaboration Experience
This role requires working closely with IT and security teams. Share examples of how you've successfully collaborated with cross-functional teams to address vulnerabilities and improve security measures.
✨Prepare for Reporting Questions
Since regular reporting is a key part of the job, be prepared to discuss how you've produced clear and concise reports in the past. Bring examples of metrics or KPIs you've tracked and how they influenced decision-making.