Vulnerability Management Service Lead

About the job you're considering

Are you passionate about cybersecurity? Are you an excellent communicator with demonstrable experience of delivering security services within organisations? Would you relish putting these skills into practice by taking on a role within Capgemini to protect us and our clients from cyber threats?

We are seeking a Vulnerability Manager with proven experience to join our cybersecurity team based out of Inverness or Preston
.

Working as part of our Security Operations team, you will be responsible for delivering a comprehensive vulnerability management service to our customer.

As a Vulnerability Manager, you will play a crucial role in safeguarding our customer's information assets by identifying, assessing, and mitigating security vulnerabilities. Your expertise in Tenable will be essential in conducting thorough vulnerability assessments and ensuring the integrity and confidentiality of sensitive data.

The Cyber Delivery Team sits within a wider Managed Services function, residing in the Cloud Infrastructure Services (CIS) UK business line. You will have the opportunity to interact with our global team of security experts, from Architects to Engineers, Analysts to Compliance Managers. Outreach in CIS doesn't just stop at security, as we actively encourage our staff to engage with other areas of the business and local communities.

The role will be hybrid and require working onsite at the customer site in either Inverness or Preston a minimum of 2 days a week, depending on business requirements.

If you are successfully offered this position, you will go through a series of pre-employment checks, including identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service).

• Own and govern the end-to-end vulnerability management framework, ensuring alignment with security policies, risk standards, remediation timelines, and exception processes.
• Lead supplier governance and performance management, driving consistent reporting, remediation practices, evidence standards, and escalation of high-risk issues.
• Oversee vulnerability risk prioritisation using industry frameworks such as CVSS, EPSS, KEV, and business criticality to maintain visibility of enterprise risk exposure.
• Deliver consolidated reporting and executive insights on vulnerability posture, remediation performance, compliance, and emerging threats to support governance decision-making.
• Assure end-to-end traceability and audit readiness while driving continuous improvement, process maturity, and optimisation across the SIAM security operating model.

You can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone.

• Significant experience in Vulnerability Management, Cyber Governance, Security Operations Governance, or GRC roles within complex enterprise environments.
• Strong understanding of the vulnerability management lifecycle, risk-based remediation, and security governance frameworks.
• Proven ability to operate effectively across multi-supplier environments, providing governance, assurance, and constructive supplier challenge.
• Excellent stakeholder management and communication skills, with experience presenting security risk and performance information to senior leaders.
• Knowledge of industry frameworks and standards such as NIST CSF, NCSC guidance, ISO 27001, and Secure by Design, ideally gained within defence, government, or other highly regulated sectors.

• Qualifications in Vulnerability Management Tooling (Qualys, Brinqa, Tenable)

Capgemini is proud to be a Disability Confident Employer (Level
2) under the UK Government's Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:

• Declare they have a disability, and
• Meet the minimum essential criteria for the role.

Please opt in during the application process.

If you are successfully offered this position, you will go through a series of pre-employment checks, including: identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service)

Some roles will also require an additional level of security clearance:

To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance.

To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements.

Throughout the recruitment process, you will be asked questions about your security…