Senior Vulnerability Management consultant

Summary: Senior Vulnerability Management Consultant needed for a leading investment bank in London, focusing on vulnerability management across infrastructure, cloud, and enterprise applications. The role involves operationalizing vulnerability reports, preparing documentation, and providing consulting services to enhance security measures. The position requires strong expertise in vulnerability management tools and processes, along with mentoring responsibilities. This is an inside IR35 role with hybrid working arrangements.

Key Responsibilities:

• Provide vulnerability management expertise involving infrastructure, cloud and enterprise applications. Primary contact for the companies vulnerability management involving processes, reporting, enhancements, compliance and interacting with business stakeholders.
• Operationalize weekly vulnerability status reports for senior leadership including UK CISO on company vulnerability management KPIs/KRIs.
• Preparation of vulnerability management process and procedure documentation.
• Provide consulting services to the vulnerability management team to assist in their security design to identify potential risks.
• Review the security issues and recommend the appropriate controls to mitigate these risks.
• Provide security awareness to clients and business groups to drive action on vulnerabilities.
• Provide support to other consultants through mentoring and peer reviews of work products as required.
• Provide ad hoc consulting services to the general user community.

Key Skills:

• Experience working with vulnerability management tools and data such as Tenable, Qualys, Rapid 7, Microsoft Defender, Aqua, Palo Alto Xpanse.
• Jira to manage project work, timelines and operational tickets.
• 5+ years of relevant experience.
• Possess strong understanding of vulnerability management processes, procedures and principles.
• Exposure to application security best practices such as secure coding, security testing techniques.
• Expert knowledge of Security Policies and Standards.
• Expert knowledge of Information Security practices.
• Knowledge of compliance, audit and privacy policies and regulations.
• General knowledge of security technology.

Salary (Rate): £470 per day

City: London

Country: United Kingdom

Working Arrangements: hybrid

IR35 Status: inside IR35

Seniority Level: Mid-Level

Industry: IT