Vulnerability Management Analyst

Vulnerability Management Analyst

Preston or Inverness (Hybrid)

40k - 50k per annum + benefits

Must be a sole UK national and eligible for Security Clearance

Are you a cyber security professional with a passion for vulnerability management? Do you thrive on coordinating remediation, engaging suppliers, and turning technical risk into clear, actionable reporting? If so, this could be your next big move.

We're recruiting on behalf of a global technology and business transformation leader, currently looking to bring five Vulnerability Management Analysts into a high-performing Security Operations team. This is a fantastic opportunity to join a growing cyber security function at a genuinely exciting time, working alongside a global network of security experts, from Architects and Engineers to Analysts and Compliance Managers.

Rather than operating the tooling directly, you'll take ownership of the process end-to-end: reviewing findings, coordinating remediation with suppliers, tracking progress, and driving timely resolution of security issues across the environment.

• Coordinate and track vulnerabilities from identification through to remediation and closure, ensuring progress meets agreed SLAs and escalating high-risk or overdue issues
• Engage with suppliers and technical stakeholders to obtain, validate and maintain accurate vulnerability data, ensuring consistent reporting standards and clear ownership
• Produce vulnerability reports, dashboards and metrics that give visibility of ageing vulnerabilities, recurring issues, SLA breaches and emerging trends
• Support governance and compliance by maintaining audit-ready evidence and documentation, and ensuring adherence to vulnerability management processes, policies and risk exception procedures

• Experience in cyber security, information security, service management or governance, with a solid grasp of vulnerability management principles (CVSS, KEV, risk ratings and remediation tracking)
• Strong analytical and reporting skills, with the ability to produce meaningful security metrics
• Proven experience engaging multiple stakeholders and suppliers to drive remediation and performance improvements
• Familiarity with vulnerability management tooling, reporting processes and audit/assurance requirements, ideally gained within a SIAM or multi-supplier, regulated, public sector or defence environment
• Desirable: Recognised Vulnerability Management qualifications and/or hands-on experience with tools such as Qualys, Brinqa or Tenable

If you've held any of these roles or used these technologies/skills, this role could be a great fit:
Vulnerability Management Analyst, Vulnerability Analyst, Cyber Security Analyst, Security Analyst, Information Security Analyst, Threat and Vulnerability Analyst, VM Analyst, Patch Management Analyst, Security Governance Analyst, Risk and Compliance Analyst, Remediation Coordinator, CVSS, KEV, Qualys, Brinqa, Tenable, SIAM, Security Operations, Sec Ops.