Threat & Vulnerability Manager; FTC)

• Legal Entity:
  The Random House Group Limited
• Compensation: GBP 60,000 - GBP 65,000 - yearly

We have a new opportunity for an experienced Threat and Vulnerability Manager to join our Technology team here at Penguin on a 7-month fixed-term contract to cover a period of parental leave. This role is offered with hybrid working from our office in Embassy Gardens, London.

As Threat and Vulnerability Manager, you’ll take ownership of our threat and vulnerability management capabilities, leading the identification, assessment and remediation of vulnerabilities across the business. Alongside this, you’ll play a hands‑on part in our wider security operations: supporting the security controls that protect our technical environment, monitoring internal and external cyber threats, and responding quickly to information security incidents.

Supporting the Head of Security Operations, you’ll help maintain and continually improve our cyber security attack surface, driving prompt and effective remediation and working with stakeholders across the business to strengthen our overall security posture.

This is an important role in reducing our exposure to cyber security threats and helping to protect the resilience of our systems and services.

About the team

The Technology team provides expertise and effective solutions to Penguin Random House. We integrate flexibility and agility which supports our consistent way of working. We set ourselves up for success by holding ourselves accountable and welcoming change. Each member of the Technology team brings skill and initiative to their role; we take personal ownership within a one team culture, working collaboratively to meet expectations from our stakeholders who trust us to deliver.

Key responsibilities:

Threat and vulnerability management

Responsible for ensuring that vulnerability detection and remediation controls and platforms are properly configured and operating effectively.

Responsible for promptly assessing new or emerging vulnerabilities and leading internal efforts to resolve or mitigate as appropriate to the severity level, including guidance and recommendations on emergency patching based on appropriate threat assessments.

As a subject matter expert, has product ownership for enterprise VM tooling in collaboration with our infrastructure and security architects.

Coordinating vulnerability scanning and penetration testing, and managing the technical remediation of their findings.

Plays a leadership role in the team to proactively challenge and drive incremental and continuous improvements in end-to-end vulnerability management processes, i.e. scopes, prioritises and leads service improvement initiatives for vulnerability management platforms and management processes.

Provide leadership and direction to the PRH community on all aspects of vulnerability management and mitigation across user endpoints, servers, networks and applications.

Continually improving PRH’s security posture through collaborative and successful vulnerability remediation efforts with internal and external teams responsible for infrastructure and applications.

Producing ad hoc, weekly and monthly metrics and KPIs evidencing vulnerability analysis, and reduction or mitigation of vulnerability risk.

Chairing Patching and Vulnerability Management forums.

Responsible for assurance of all BAU vulnerability management processes managed by PRH Security Operations or by our nominated MSSPs.

Will drive technical integrations between VM platforms to leverage automation and threat/vulnerability intelligence.

Security operations

Monitoring internal and external cyber threats and ensuring our technical controls stay aligned to them.

Supporting the operation of key security controls, including…