The purpose of this role is to track and manage vulnerabilities from multiple sources across our client facing technology and proprietary solutions across our Global Practices

Job Description:

Key responsibilities:

• Collaborate daily with our Cyber Operations and Product/Platform teams to coordinate the tracking, prioritisation, and remediation of security vulnerabilities identified across the estate

• Act as a dedicated point of coordination between Cyber Operations and Product/Platform teams, ensuring vulnerabilities are clearly understood, owned, and progressed to remediation

• Collaborate with product teams to prioritise and support remediation plans for weaknesses and vulnerabilities that cannot be fixed within agreed SLAs, working with all three Practice Areas to document risk-based justifications and remediation options

• Provide timely and accurate reporting on vulnerability status, including open, in progress, accepted risk, and remediated vulnerabilities

• Work across multiple data sets and vulnerability sources, including external third‑party security rating tools, threat intelligence feeds, CNAPP platforms, penetration test results and endpoint security tooling

Candidate Profile:

• Demonstrate practical experience supporting a vulnerability management lifecycle, including identification, analysis, tracking, remediation coordination, and reporting

• A good understanding of vulnerability management tooling; scanners, posture management (such as data or AI SPM) and cloud workload protection with the ability to consume and interpret outputs

• Ability to perform risk based assessments of vulnerabilities and support prioritisation decisions, for example by considering exploitability, asset context, and actionable threat intelligence

• Broad exposure to common vulnerability and weakness categories, including multiple OWASP Top 10 risks (e.g. Web Application, API, infrastructure, and emerging areas such as agentic or AI-enabled applications)

• A proactive problem solver, with the ability to analyse issues from multiple perspectives and work collaboratively with technical and non-technical stakeholders to drive remediation outcomes

Location:

Brand:

Time Type:

Contract Type: