Job Title: Vulnerability Management SME
Job Location: Havant, 2-3 days onsite in a week.
Duration: 6 months
Description:
Vulnerability management SME
The Vulnerability Management Subject Matter Expert (SME) is responsible for the design, delivery, and continuous improvement of the organisation’s vulnerability management service for End User Compute devices. The role focuses on utilising tools such as Qualys to identify, assess, prioritise, and support the remediation of vulnerabilities across infrastructure, endpoints, and cloud environments.
The SME ensures that vulnerabilities are effectively managed in line with organisational risk appetite and security standards, supporting a proactive approach to reducing cyber risk. This includes maintaining accurate vulnerability data, driving remediation activities, and ensuring alignment with governance, compliance, and audit requirements across the organisation.
Key Accountabilities
* Deliver and support vulnerability management capabilities using Qualys, including asset discovery, vulnerability scanning, and risk prioritisation
* Analyse and interpret End User Compute vulnerability data, providing actionable insights and remediation recommendations
* Collaborate with endpoint management and application management SMEs to action remediation activities
* Monitor and report on vulnerability posture, risk exposure, and remediation performance across the organisation
* Develop and maintain automation and reporting capabilities to improve efficiency and visibility of vulnerability management activities
* Collaborate with cyber security, risk, and service management teams to ensure alignment with governance, compliance, and risk frameworks
Skills, Knowledge & Experienc
eEssentia
* lProven experience operating vulnerability management tools (e.g. Qualys) in an enterprise environmen
* tStrong understanding of vulnerability management lifecycle, including scanning, prioritisation, and remediatio
* nKnowledge of common security vulnerabilities, risk scoring (e.g. CVSS), and remediation approache
* sExperience working with endpoint management tools like Intune and SCCM to support vulnerability remediatio
* nUnderstanding of cyber security principles, risk management, and ITIL-based service management practice
sDesirabl
* eExperience integrating vulnerability management tools with enterprise platforms (e.g. ServiceNow
* )Familiarity with cloud environments (e.g. Azure) and associated security consideration
* sKnowledge of patch management processes and tool
* sScripting or automation experience (e.g. PowerShell, Python
* )Experience supporting audit, compliance, or regulatory requirement
s