VP of Vulnerability Management
Salary - £95-110k + 15-20% Bonus + Benefits
Location – London (2-3 days in office per week)
Newly created role with a major Financial Markets organization, looking to hire a VP level Vulnerability Management SME to build on and enhance their existing VM capabilities and eventually take ownership and stand this up as its own core pillar across Information Security.
First and foremost, they need someone who understands the technical elements of Vulnerability Management inside out, who can work with the wider SecOps and Infrastructure Engineering functions to respond to high-profile vulnerabilities and ensure all vulnerability management platforms are working at maximum capacity and all patching runs smoothly; whilst also working with the wider business to ensure Vulnerability Management is incorporated into wider company strategies and acting as the Subject Matter Expert for all Vulnerability Management related queries.
This is an incredibly opportunity to genuinely take ownership of their Vulnerability Management function as they look to significantly invest and develop it into its own core pillar within Information Security. You’ll have freedom to remain hands-on in the technical elements whilst also leading the strategic and long-term growth of the function.
Key Responsibilities
* Drive the Vulnerability Management strategy across the business, acting as the SME for all VM related queries.
* Configure, fine-tune and manage the Vulnerability Management tooling (Qualys, RiskSense, Tanium, etc).
* Work with SecOps teams to coordinate response to high profile / severity vulnerabilities.
* Develop and enhance Vulnerability Management standards and procedures, continually looking for opportunities to VM capabilities.
Key Requirements
* Hands on experience in a dedicated Vulnerability Management position, acting as the VM authority and SME.
* Previous experience working within or alongside a SecOps function, responding to incidents and safeguarding against high profile vulnerabilities.
* Knowledge of cryptographic and encryption concepts and their associated vulnerabilities / security concerns – SSH, TSL, etc.
* Strong communicator who can work with both technical and non-technical audiences, translating technical concepts into business risks.