Resilience Vulnerability Management Lead

Job Title

Resilience Vulnerability Management Lead

Sheffield /Birmingham, UK(Hybrid)

Contract – Inside IR 35 – Banking or Insurance Domain

No Sponsorship Provided

• Lead resilience assessments for multiple IBS applications (front-office and back-office), ensuring alignment with operational resilience standards.
• Review architecture documents and application artefacts, leveraging data from platforms
• Pre-fill vulnerability questionnaires, identify issues or questions, and facilitate workshops with ITSO to address findings.
• Analyse metrics and data (e.g., incident logs) to identify resilience issues, vulnerabilities, and areas for improvement.
• Ensure timely sign-off of assessments by all relevant stakeholders.
• Consolidate findings into comprehensive reports, providing actionable recommendations to help the business prioritise remediation actions.
• Raise identified vulnerabilities as required.
• Contribute to executive summaries for IBS and participate in presentations to stakeholders.

• Manage the end-to-end vulnerability lifecycle, including creation, approval, tolerance assessment, progress tracking, reporting, remediation, closure governance, closure pack preparation, approval, QA, and closure.
• Conduct control reviews outside of standard vulnerability assessments, raising vulnerabilities as needed.
• Collaborate with IT Service Owners to address identified gaps, gathering information on risk, impact, severity, mitigation, and remediation plans.
• Work with Service Sustainability Leads and IT Service Owners to collect details on Evergreening items.
• Ensure Impact Assessments are completed for all raised vulnerabilities and update Vulnerability Severity records accordingly.
• Support other Lines of Business with tolerance assessments linked to MSS-owned applications and vulnerabilities.
• Analyse weekly vulnerability reports to identify new vulnerabilities impacting MSS Important Business Services and drive them through the tolerance assessment process.
• Ensure remediation actions are reflected in golden source systems
• Prepare closure packs with supporting evidence
• Prepare Risk and Control Management Meeting packs or equivalent reports for various stakeholders.
• Represent the team in governance forums as a delegate when required.
• Provide inputs and collaborate with stakeholders to prepare consolidated CIB reports.
• Participate in vulnerability portal feature testing, provide feedback, and contribute requirements for the product backlog.
• Attend and actively contribute to daily and weekly meetings related to Ops Resilience and Vulnerability Management, collaborating with lines of business and other stakeholders.

• Bachelor’s degree in Information Technology, Computer Science, or related field (or equivalent experience).
• Proven experience in operational resilience, risk management, or vulnerability management within a large financial institution.
• Strong understanding of resilience frameworks, vulnerability lifecycle management, and regulatory requirements.
• Excellent analytical, communication, and stakeholder management skills.
• Ability to work collaboratively across teams and drive cross-functional initiatives.

• Strong problem-solving and analytical skills.
• Effective communicator with the ability to present complex findings to technical and non-technical stakeholders.
• High attention to detail and commitment to quality.
• Proactive, self-motivated, and able to manage multiple priorities in a fast-paced environment