Vulnerability Management Lead

Vulnerability Senior Analyst

Contract:

Permanent.

Working hours:

35 hours per week, full time. We are open to part time or flexible working patterns; please state your desired pattern in your application.

Reporting to:
Information and Cyber Security lead.

Salary: £53,833 to £65,000 for London location; £47,470 to £57,701 for other locations.

Location:

London, Cardiff, Manchester, Coventry, or Edinburgh.

Hybrid working: at least four days per fortnight in the office. Extensive opportunities for personal and career development.

You will lead and shape the Financial Ombudsman Service’s end‑to‑end Vulnerability Management Programme, owning how we identify, assess and reduce cyber risk across the organisation. Working within the Information and Cyber Security function, you will collaborate with technical teams and business stakeholders to embed strong governance, drive accountability and ensure vulnerabilities are effectively prioritised and remediated. You will provide structure, insight and clear reporting to the programme, translating complex risk into meaningful action for both technical teams and senior leadership.

• Strong knowledge of vulnerability management frameworks, vulnerability lifecycle processes and risk‑based prioritisation models
• Hands‑on experience with leading VM platforms such as Qualys, Tenable, Rapid 7, Microsoft Defender for Cloud, including exploitation analysis, CVSS scoring and integration of threat intelligence feeds
• Proven experience engaging technical, business and governance teams to drive remediation accountability
• Knowledge of relevant cybersecurity standards, regulations and frameworks (e.g. NIST, SOC 2, ISO 27001, Cyber Essentials)

• Ability to communicate technical concepts to non‑technical stakeholders, including executives and procurement colleagues
• Strong analytical and problem‑solving skills, with a keen eye for detail
• Ability to manage multiple projects and prioritise tasks effectively
• Excellent written and verbal communication skills, with the ability to write clear, concise reports

• Flexibility: remote, hybrid, or in‑office options
• Well‑being: health plan, gym memberships, mental health support
• Growth: investment in your future with courses, mentorship and promotions
• Culture: diverse, inclusive, collaborative, fun
• 25 days holiday entitlement, with option to buy or sell days
• Generous pension
• Family‑friendly policies, including enhanced maternity pay, carers and dependants leave
• Employer‑provided benefits such as private medical insurance, virtual GP, critical illness cover, life assurance cover
• Choice of voluntary benefits including technology scheme, cycle‑to‑work scheme, will‑writing service
• Gym membership discounts and a fully equipped on‑site gym open 24/7 in London only

The Financial Ombudsman is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all team members. We view diversity as fundamental to our success and welcome applications from under‑represented groups across all communities. For more information, visit https://