Vulnerability Manager

+12 months +

+hybrid Corsham

+DV cleared role

+Inside IR35

+£550 - £600 a day

We are seeking an experienced Vulnerability Management Lead to drive enterprise vulnerability management and cyber risk reduction within a secure MOD/Defence environment.

The successful candidate will have a strong background in vulnerability management leadership, with hands-on exposure to tools such as Tanium or Elastic, a thorough understanding of CVSS and remediation governance, and experience supporting major cyber security incidents.

You will take ownership of vulnerability management frameworks, coordinate remediation activities, monitor compliance and produce board-level reporting to support cyber risk decisions. Experience working within MOD, Defence Digital or Strategic Command environments is highly desirable.

Key Responsibilities

• Lead and maintain enterprise vulnerability management frameworks, policies, standards and procedures, driving continuous improvement.

• Coordinate vulnerability identification, assessment, prioritisation and remediation across enterprise systems and services.

• Manage and optimise vulnerability management technologies, particularly Tanium and Elastic, alongside other relevant security tools.

• Apply CVSS and established MOD cyber risk management processes to assess, prioritise and manage vulnerabilities.

• Coordinate remediation activities, track progress against agreed SLAs and KPIs, and escalate outstanding risks.

• Produce board packs, vulnerability dashboards, risk reports and executive briefings for senior stakeholders and governance forums.

• Support vulnerability management governance, compliance, accreditation and assurance activities.

• Contribute to vulnerability management boards, security working groups and wider cyber risk governance.

• Participate in the management of major cyber security incidents, including technical assessments of vulnerability exploitation.

• Support root cause analysis, post-incident reviews and the implementation of corrective actions.

• Correlate threat intelligence with vulnerability data and contribute to improvements in security monitoring and detection capabilities.

Essential Skills & Experience

• Current, valid DV security clearance.

• Proven experience in a Vulnerability Management Lead, Vulnerability Manager or equivalent senior vulnerability management role.

• Experience using enterprise vulnerability management and assessment tools, particularly Tanium or Elastic.

• Strong understanding of CVSS, vulnerability prioritisation, remediation governance and cyber risk management.

• Experience working within the MOD, Defence Digital or a similar Defence environment.

• Proven ability to produce board-level packs, management information, risk reports and executive briefings.

• Experience participating in cyber security incident management, including major or significant incidents.

• Experience coordinating remediation activities and managing vulnerability-related risks across complex enterprise environments.

If you'd like to discuss this Vulnerability Manager in further detail, please send your updated CV to chloe.manrowski@cbsbutler.com and I will get in touch.