Vulnerability Management Lead

You will need to login before you can apply for a job.

View more categories View less categories Sector Supply Chain and Procurement Role Manager Contract Type Permanent Hours Full Time

Permanent

The Vulnerability Manager is responsible for leading and coordinating the organisation's vulnerability management programme, ensuring security vulnerabilities are effectively prioritised, remediated and reported upon across all technology domains.

Working closely with the Vulnerability Analyst, Security Operations, Risk Management, Security Architecture and technology delivery teams, the Vulnerability Manager provides governance, oversight and accountability for vulnerability remediation activities. The role ensures vulnerabilities are managed in accordance with organisational risk appetite and regulatory requirements whilst driving continuous improvements in vulnerability management processes and risk reduction.

Unlike the Vulnerability Analyst, whose focus is the identification and technical assessment of vulnerabilities, the Vulnerability Manager is accountable for driving remediation outcomes, coordinating stakeholders and providing visibility of vulnerability risk across the enterprise.

• Own and drive the enterprise Vulnerability Management programme, ensuring vulnerabilities are identified, prioritised and remediated in line with risk-based frameworks.
• Define and maintain vulnerability management policies, standards, processes and service level targets.
• Review vulnerability risks, determine remediation priorities and manage risk acceptance and exception processes.
• Coordinate remediation activities across Infrastructure, Cloud, Networks, Applications, End User Computing and third-party suppliers, ensuring accountability and timely resolution.
• Build strong relationships across Technology, Security, Risk and business teams, acting as the key point of contact for vulnerability governance and reporting.
• Develop and present dashboards, KPIs and management reports, providing insight into vulnerability trends, risk exposure and remediation performance.
• Support supplier security reviews and monitor third-party remediation activities where vulnerabilities impact business services.
• Drive continuous improvement by identifying recurring security issues, enhancing controls and supporting the implementation of new vulnerability management capabilities and tooling.
• Escalate significant cyber risks and emerging threats to senior stakeholders, ensuring appropriate governance and action is taken.

• Experience in vulnerability management, security operations, or threat intelligence
• Strong understanding of cyber risk, exploitability, and attack patterns
• Ability to interpret complex technical data and translate into business risk
• Familiarity with vulnerability tooling (e.g. scanners, EDR, threat intel platforms)
• Strong stakeholder communication and influencing skills
• Understanding of vulnerability frameworks e.g. CVSS and Threat Intelligence

• Knowledge of ITIL processes
• Operating in a structured programme environment (agile and waterfall)
• Experience working in complex multi-vendor environments
• Experience with vulnerability tooling
• Experience with in a global organisation, containing different operating companies

At RS, we are making amazing happen for a better world.

As a global product and service solutions provider, we help industrial customers operate more efficiently and sustainably. Operating in 33 markets, we support around one million customers worldwide with more than 875,000 stocked products, access to over five million additional products, and a range of service solutions designed to help businesses thrive.

What…