Vulnerability Management and Remediation Coordination Lead

Job Overview

Job title: Vulnerability Management and Remediation Coordination Lead

Job type: Contract

Contract Length: Through end of August 2026 (~560 hours total)

Rate: $70 – $80 per hour (W2)

Role

Location:

100% Remote (United States)

A US public sector client. They have engaged us to run the coordination layer of their vulnerability remediation programme for a defined engagement ending in August 2026.

• Review existing vulnerability data from scans, assessments, and other security tools, and establish a consolidated baseline
• Document a remediation timeline that reflects current risk posture and aging across the estate
• Categorise and prioritise vulnerabilities by risk, severity, exploitability, and potential operational impact — aligned to NIST guidance
• Validate that remediation time frames match the agency's expectations for each risk level
• Coordinate remediation with system, server, and application owners — communicating expectations, risk context, and timelines clearly
• Track remediation progress and surface blockers, dependencies, and delays early
• Escalate overdue, high-risk, or critical vulnerabilities to the appropriate governance or oversight bodies
• Produce periodic status reports summarising remediation progress and outstanding risk
• Validate remediation actions through available evidence — scan results and other supporting artifacts — and confirm closure in tracking systems
• Where a vulnerability cannot be remediated within the required timeframe, document it formally with approved risk acceptance or exception paperwork
• Identify process gaps, systemic issues, and control weaknesses, and recommend improvements aligned with NIST standards and agency governance

• 8+ years building vulnerability inventories and establishing consolidated baselines across a large estate
• 8+ years running risk classification and prioritisation aligned to NIST guidance
• 8+ years tracking vulnerability remediation end-to-end, including coordination with system and application owners
• 8+ years producing executive-ready status reports on remediation progress and outstanding risk
• Demonstrated track record validating remediation actions through scan evidence and other supporting artifacts