Patch Management Governance & Reporting Support

Job Title Patch Management Governance & Reporting Support

Location Birmingham

Corporate Title Assistant Vice President

The Patch Management Team governs the end-to-end patching process, ensuring vulnerabilities are assessed, patches are tested and deployed, and compliance is tracked against policy and remediation timelines aligned to regulatory expectations.

The team works with Technology Owners, Engineering Leads, and CSO (Chief Security Office) to manage patch risks, oversee remediation progress, drive compliance, and report patching performance to required governance forums.

You will be responsible for enabling technology teams to meet Patch Management requirements and KPIs through accurate reporting, robust governance, and sustainable controls. Leading audit remediation, technology onboarding, management reporting, standards, process documentation, and user training across the patch management lifecycle.

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That's why we are committed to providing an environment with your development and wellbeing at its centre.

• Hybrid Working - we understand that employee expectations and preferences are changing. We have implemented a model that enables eligible employees to work remotely for a part of their working time and reach a working pattern that works for them
• Competitive salary and non-contributory pension
• 30 days' holiday plus bank holidays, with the option to purchase additional days
• Life Assurance and Private Healthcare for you and your family
• A range of flexible benefits including Retail Discounts, a Bike4
  
  Work scheme and Gym benefits
• The opportunity to support a wide ranging CSR programme + 2 days' volunteering leave per year

• Assisting Technology units to be compliant with the Patch Management KOD and exceed Key Performance Indicators (KPIs). Requirement to work closely with technology units to ensure accurate, complete, and consistent patch reporting is established, sustained and timely and regularly provided
• Establishing and operating new governance procedures and controls. Establishing and being involved in the effective and consistent operation of both new and enhanced sustainable patch management governance processes, solutions and capabilities
• Having ownership and/or participating extensively in audit remediation and compliance related activities relating to the robust governance of the Patch Management process, which may include, but not limited to: the identification and establishment of new or enhanced KPIs and related IT risk/senior management reporting, the establishment of new and/or enhanced governance capabilities and associated reporting, the onboarding of additional and/or new technologies into the reporting and governance services of the centralized GTI Patch Management function, and the creation of new or enhanced patch management standards and guidelines
• Responsibility for maintaining working instruction documentation and user training materials and will be expected to identify update requirements and ensure such updates are agreed and applied

• Experience working in large scale technology programs / Operations teams with a range of stakeholders simultaneously with limited supervision and guidance
• Experience in undertaking risk management activities e.g. operating/performing control governance duties, identifying new risks etc.
• Knowledge of various IT project methodologies and life cycles (Information Technology Infrastructure Library and software development life cycle)
• Awareness of the Vulnerability Management processes
• Very good…