Senior Vulnerability Management consultant sought by leading investment bank based in London.
**Inside IR35** - Hybrid working
Daily responsibilities:
Provide vulnerability management expertise involving infrastructure, cloud and enterprise applications. Primary contact for the companies vulnerability management involving processes, reporting, enhancements, compliance and interacting with business stakeholders.
Operationalize weekly vulnerability status reports for senior leadership including UK CISO on company vulnerability management KPIs/KRIs
Preparation of vulnerability management process and procedure documentation
Provide consulting services to the vulnerability management team to assist in their security design to identify potential risks
Review the security issues and recommend the appropriate controls to mitigate these risks
Provide security awareness to clients and business groups to drive action on vulnerabilities
Provide support to other consultants through mentoring and peer reviews of work products as required
Provide ad hoc consulting services to the general user community
Essential:
Experience working with vulnerability management tools and data such as Tenable, Qualys, Rapid 7, Microsoft Defender, Aqua, Palo Alto Xpanse.
Jira to manage project work, timelines and operational tickets.
5+years of relevant experience
Possess strong understanding of vulnerability management processes, procedures and principles
Exposure to application security best practices such as secure coding, security testing techniques
Expert knowledge of Security Policies and Standards
Expert knowledge of Information Security practices
Knowledge of compliance, audit and privacy policies and regulations
General knowledge of security technology
Nice to have:
Experience with PowerBI
Programming skills and experience (python, java, SQL)
Technical network skills
Knowledge of OWASP, SANS, NIST, ISO 27001, ISF or other security-related practices
Previous Banking/Financial Industry experience
CISSP, CISA, CRISC, CSSLP, SABSA certifications
Skills & Competencies:
Vulnerability management
Risk reporting
Programming
Data management
Please apply within for further details - Matt Holmes
TPBN1_UKTJ