Key Responsibilities
- Own the vulnerability management lifecycle across the estate from scanning and detection through to remediation and closure.
- Coordinate and oversee patch management schedules across servers both on prem and cloud, endpoints, network devices, and 3rd party applications, working closely with infrastructure, application, and security teams.
- Identify, Triage and prioritise vulnerabilities based on severity, exploitability, and business risk (e.g. CVSS scoring, threat intelligence).
- Track remediation SLAs and escalate overdue or high risk vulnerabilities to relevant stakeholders and senior management.
- Maintain and report on vulnerability and patching KPIs/metrics, providing regular reporting to Service Delivery and Corporate Technology Leadership.
- Liaise with third party vendors and internal teams to ensure timely patch availability and application.
- Support audit and compliance requirements (e.g. ISO 27001, Cyber Essentials, PCI-DSS) by maintaining accurate vulnerability and patching records.
- Continuously improve vulnerability management processes, tooling, and automation to increase remediation speed and coverage.
- Act as the escalation point for critical/zero-day vulnerabilities requiring emergency patching.
Key Skills & Experience
- Proven experience in vulnerability management, patch management, or IT security operations.
- Strong understanding of vulnerability scanning tools (Qualys, Rapid7) and patch management platforms (Ninja One, Ivanti, Intune).
- Familiarity with risk frameworks and scoring methodologies (CVSS, NIST, etc.).
- Experience working within ITIL aligned service delivery environments, particularly change and incident management.
- Strong stakeholder management skills able to work across infrastructure, cloud, infosec, and application teams.
- Ability to produce clear reporting and communicate risk to both technical and non-technical audiences.
- Relevant certifications advantageous (e.g. CompTIA Security+, CISSP, ITIL Foundation).
Key Relationships
- Service Delivery Management
- Information Security / CISO function
- Infrastructure & Application teams
- Change & Release Management
- Third-party vendors/suppliers
Your Wellbeing - We take your health and well-being very seriously by providing a range of benefits to give you and your family peace of mind. These include:
- Market leading family friendly policies such as access to our Maternity, Adoption and Paternity policies from Day 1 of your employment
- Free access to Headspace, a mindfulness & meditation digital health app
- Free access to Peppy digital health app that offers personalised support through fertility treatment becoming a parent or menopause
- EAP (Employee Assistance Programme) - Offering you support on a wide range of subjects including financial concerns, mental wellbeing and more general queries around family, work, housing, and health
- Cycle to work scheme
- Discounts on gym membership
- Contributory pension scheme & death in service
Your Lifestyle - It’s important you strike the right balance between your work and personal life. We provide benefits to support you when at work and when you’re enjoying your leisure time.
- Minimum of 27 days holiday per year
- Option to buy or sell holiday days through our flexi-holiday scheme
- Discounts on gym membership nationwide
- Access to discounts on a range of high street and online brands
- Community support and charitable giving
Your Contribution - We’re focused on rewarding those that go the extra mile in helping us achieve our goals.
- Participation in our annual discretionary bonus scheme designed to reward your contribution to our success
- Proudly Shawbrook recognition scheme focused on recognising our role models and thanking our colleagues for a job well done
