[Hiring] Vulnerability Management Lead @RS Group

Role Description

The Vulnerability Manager is responsible for leading and coordinating the organisation's vulnerability management programme, ensuring security vulnerabilities are effectively prioritised, remediated and reported upon across all technology domains.

Working closely with the Vulnerability Analyst, Security Operations, Risk Management, Security Architecture and technology delivery teams, the Vulnerability Manager provides governance, oversight and accountability for vulnerability remediation activities. The role ensures vulnerabilities are managed in accordance with organisational risk appetite and regulatory requirements whilst driving continuous improvements in vulnerability management processes and risk reduction.

Unlike the Vulnerability Analyst, whose focus is the identification and technical assessment of vulnerabilities, the Vulnerability Manager is accountable for driving remediation outcomes, coordinating stakeholders and providing visibility of vulnerability risk across the enterprise.

What You'll Be Doing

• Own and drive the enterprise Vulnerability Management programme, ensuring vulnerabilities are identified, prioritised and remediated in line with risk-based frameworks.
• Define and maintain vulnerability management policies, standards, processes and service level targets.
• Review vulnerability risks, determine remediation priorities and manage risk acceptance and exception processes.
• Coordinate remediation activities across Infrastructure, Cloud, Networks, Applications, End User Computing and third-party suppliers, ensuring accountability and timely resolution.
• Build strong relationships across Technology, Security, Risk and business teams, acting as the key point of contact for vulnerability governance and reporting.
• Develop and present dashboards, KPIs and management reports, providing insight into vulnerability trends, risk exposure and remediation performance.
• Support supplier security reviews and monitor third-party remediation activities where vulnerabilities impact business services.
• Drive continuous improvement by identifying recurring security issues, enhancing controls and supporting the implementation of new vulnerability management capabilities and tooling.
• Escalate significant cyber risks and emerging threats to senior stakeholders, ensuring appropriate governance and action is taken.

Qualifications

• Experience in vulnerability management, security operations, or threat intelligence.
• Strong understanding of cyber risk, exploitability, and attack patterns.
• Ability to interpret complex technical data and translate into business risk.
• Familiarity with vulnerability tooling (e.g. scanners, EDR, threat intel platforms).
• Strong stakeholder communication and influencing skills.
• Understanding of vulnerability frameworks e.g. CVSS and Threat Intelligence.

Requirements

• Knowledge of ITIL processes.
• Operating in a structured programme environment (agile and waterfall).
• Experience working in complex multi-vendor environments.
• Experience with vulnerability tooling.
• Experience within a global organisation, containing different operating companies.

Benefits

• Financial - pension/retirement; life assurance; salary finance (payroll deduction loan scheme).
• Wellbeing - medical plans; health screening; critical illness; disability insurance; holiday / paid time off; employee assistance programme; discounted gym/health club membership.
• Lifestyle - transportation assistance schemes (e.g., cycle to work, travel loans, car leasing); onsite catering/lunch vouchers; retail discounts.
• Spotlight – our global recognition programme provides a platform to highlight and recognise people role modelling our values.