Vulnerability Manager (Permanent)

Responsible for developing, implementing, and maintaining processes and documentation to ensure the robustness, stability, and compliance of technology services and systems. To coordinate across technology, business, and risk functions to enhance operational resilience, manage regulatory compliance, oversee audit activity and drive risk management.

Technology Resilience: Accountable for co-ordinating the development and maintenance of technology mapping processes to ensure a full understanding is in place for all technologies and technology services in context of their resiliency (response and recovery) position to support the identified Important Customer Business Services and therefore comply both with stated business risk appetite and underpin the 2nd line run compliance with UK Operational Resilience requirements. Work closely with all teams across the company to identify and mitigate potential risks to technology infrastructure and systems. This spans systems and services directly managed by the IT department as well as systems that are managed by different business areas. Implement processes to identify areas for improvement and support the implementation of appropriate solutions.

Audit and Compliance: Accountable for managing and overseeing all IT department audits both internal and external, ensuring a clear, collaborative and open environment that will provide relevant assessments to identify areas of non-compliance and where improvements can be made.

Risk Management: Responsible for managing the risks across the IT department that align to the company's risk management. Conducting regular risk assessments across the IT department to identify, evaluate and mitigate potential risks to the department and company. Providing training to colleagues across the IT department to ensure they understand risk management and controls and ensure all controls are effective and reportable. Collaboration is essential to ensure the success of the function, fostering good relationships and identifying and providing training and support where required.

Mentorship: Act as a mentor to direct reports and teams, assisting in the performance of duties upon request, ensuring constant improvement of skills, building a pipeline of capable resources. Establish and maintain a strong sense of ownership for the delivery of timely, high-quality outcomes to our customers, colleagues and company. Champion the organization's long-term vision by aligning departmental goals with enterprise-wide objectives, ensuring cohesive execution across business units.

Change Leadership: Support enterprise-level change initiatives, driving transformation through effective communication, stakeholder engagement, and change management strategies.

Culture & Talent Development: Model and cultivate a high-performance culture, mentoring emerging leaders and supporting enterprise-wide talent development initiatives.

Risk & Governance Oversight: Contribute to enterprise risk management and governance frameworks, ensuring compliance, resilience, and ethical leadership through pragmatic delivery.

Skills, qualifications, experience: Proven experience with a strong track record in delivering multiple projects successfully across operational areas, IT and processes. Extensive knowledge of audit practices and principles, with experience in conducting audits and managing compliance. Solid understanding of risk management processes and strategies, incident response and technology infrastructure management. Deep knowledge and practical execution of Operational and Risk and Resiliency Management principles and practices. Exceptional leadership and team management skills.

Personal Attributes: Detail and quality oriented, with a customer focus, with an exceptionally keen eye for detail and highly organised.