Vulnerability Management Analyst

Vulnerability Management Analyst

Preston - hybrid working (2 days per week onsite)

Up to £47,000 + excellent corporate benefits package

Sole UK Nationals only/No Dual Nationals - Eligibility for SC clearance required

Finding a vulnerability is only the beginning. The real challenge is making sure somebody fixes it.

We're looking for a Vulnerability Management Analyst to join a growing cyber security team supporting a major client programme. You'll take identified vulnerabilities and help drive them through prioritisation, remediation and closure-working with suppliers and technical teams to ensure nothing important is overlooked or left unresolved.

This isn't a Penetration Tester role, and you won't spend your days running vulnerability scans. It's ideal for someone working as a Vulnerability Analyst, Vulnerability Remediation Analyst, Cyber Security Analyst, Security Governance Analyst or Vulnerability Management Coordinator who is comfortable combining cyber knowledge with reporting, organisation and plenty of stakeholder engagement.

What you'll be doing

Tracking vulnerabilities from identification through to remediation and closure.

Working with suppliers and technical owners to agree actions and timescales.

Prioritising issues using severity, CVSS scores, risk ratings and remediation SLAs.

Escalating high-risk, overdue or repeatedly unresolved vulnerabilities.

Producing dashboards and reports covering vulnerability ageing, trends and SLA performance.

Maintaining accurate records and audit-ready evidence.

Supporting security governance, assurance and risk-exception processes.

Helping improve the effectiveness of the wider vulnerability management service.

What we're looking for

Previous experience within vulnerability management, cyber security, information security or security governance.

Experience coordinating or tracking vulnerability remediation.

A good understanding of CVSS, vulnerability severity, risk ratings and remediation processes.

Familiarity with tools such as Qualys, Tenable, Brinqa, Rapid7 InsightVM or similar.

Strong reporting, data interpretation and documentation skills.

Confidence e...