Vulnerability Analyst

Vulnerability Management Analyst (Contract)

Duration: 4 months

Start: ASAP

Clearance: BPSS

Our client is looking for two experienced Vulnerability Management Analysts to support the delivery of a centralised governance function focused on vulnerability exception management.

Key Responsibilities:

• Establish and operate a governance framework for vulnerability exceptions
• Define and maintain end-to-end exception management processes aligned to security policies
• Conduct risk-based assessments of vulnerability exceptions, focusing on high and critical risks (including KEVs)
• Review, challenge and approve exception requests, ensuring clear ownership and remediation timelines
• Track and report on exception status, risk exposure, and ageing across the estate

Key

Skills & Experience:

• Strong background in vulnerability management within a cyber security environment
• Experience with exception management, governance, and risk assessment
• Understanding of CVEs, KEVs, and remediation processes
• Ability to engage stakeholders and drive accountability
• Strong analytical and reporting skills

This is an excellent opportunity to join a fast-paced environment, contributing to the maturity of vulnerability governance and risk management practices.