12 of 12 Vulnerability Management Jobs in the City of London

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … incidents and strengthen the firm's overall security posture. This is a hands-on technical role covering Cyber Security Engineering, Incident Response, Threat Monitoring, Vulnerability Management and Security Architecture (Infrastructure focussed) using tools such as MS Defender and MS Sentinel. You'll work across a complex infrastructure environment ...

technology and IT due diligence assessments to identify risks, opportunities and value creation initiatives. Assessing enterprise architecture, infrastructure, cloud environments, technology operations, IT service management and digital capabilities. Evaluating technology organization structures, governance models, operating models and IT processes. Reviewing technology roadmaps, digital transformation programmes and strategic technology investments. … performance, digital transformation objectives or investment outcomes. Collaborating with cybersecurity specialists to evaluate key security capabilities, governance frameworks, cloud security controls, identity and access management practices, and overall cyber resilience as part of broader technology advisory engagements. Producing high-quality reports, presentations and executive briefings. Managing project workstreams ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

cloud PaaS provider (e.g. Azure or AWS) Strong working knowledge of information security standards and good practice (e.g. ISO 27001) Understanding of designing security management systems Experience with threat and vulnerability management systems Ability to assess security control designs and configurations for effectiveness in risk mitigation … collaborative, consultative approach with a genuine desire to help your team succeed Service delivery/project management experience; Agile and DevOps exposure is a plus Nice to have: A track record of building trusted relationships with security stakeholders Experience drafting, implementing and maintaining security processes Experience managing the delivery ...

responsible for delivering and operating shared platform capabilities that enable trusted data services and production-grade AI-driven workflows. Working closely with Platform Product Management, you will help ensure platforms are scalable, reliable, secure, and widely adopted across product domains while supporting innovation through high-quality engineering execution. Responsibilities … guardrail mechanisms required for safe AI workflows Implement security controls, access governance, encryption, and audit requirements in partnership with InfoSec while ensuring enterprise SDLC, vulnerability management, and change management compliance Requirements 12+ years leading platform engineering teams delivering shared services or large-scale SaaS systems with production ...

governance Partnering with engineering, data and technology teams to embed effective security controls into products and platforms Driving improvements in security event monitoring, exposure management and alerting capabilities Conducting security reviews of new products, services and technology initiatives Building meaningful security metrics and reporting that support informed decision-making … security, governance, risk or compliance Experience building security controls and automated security solutions within modern cloud environments Knowledge of security technologies such as SIEM, vulnerability management, data protection, endpoint security or exposure management platforms Experience working with APIs, automation, scripting and infrastructure-as-code technologies Familiarity with ...

schema creation, and operational workflows across cloud and on-prem platforms. Support production systems with a focus on high availability, disaster recovery, incident response, vulnerability management, patching, and change management. Containerize applications and support deployments using container orchestration platforms. Partner with development teams to understand application codebases … architecture, improving deployment, monitoring, and operational readiness. Use infrastructure as code and configuration management tools such as Terraform, Chef, or Ansible to drive consistency and repeatability. Troubleshoot complex deployment, performance, networking, and infrastructure issues, with an emphasis on preventing recurring manual fixes through automation. Use AI-assisted engineering tools ...

physical security policies and controls. Governance, Risk, and Compliance maintain said policies, ensure controls are operating effectively via assessment and attestation, and own the vulnerability management program to identify and correct any problems within. Responsibilities Security Metrics – Uses automated and manual processes to produce regular reports communicating … with Regulatory Compliance Experience in an exchange, trading facility, or financial services a plus Experience in Customer communication and Vendor evaluation Experience with senior management and board metrics generation and communication Advanced certifications (for example, the CISSP) Advanced technical writing and/or communication education and experience University degree ...

Cyber Security Specialist to join the Infrastructure Engineering team. This hands-on role covers cybersecurity, infrastructure security, incident response, threat monitoring and vulnerability management to continually improve the firm’s global security posture. The role is based in London with hybrid work: 3 days in office (4 days ...

Infrastructure Engineering team of a leading international law firm. This is a hands-on role covering cybersecurity, infrastructure security, incident response, threat monitoring and vulnerability management, with responsibility for continually improving the firm's global security posture. Key Responsibilities Lead and support cyber incident response and investigations. Identify ...

Manager. The boundaries of the role are typically defined by the SZC Digital & IT's governance structure including policies and procedures related to data management, technology procurement, and project management. The Cyber Assurance Lead post holder operates within these boundaries to ensure that their function aligns with regulatory requirements … industry standards. Principal Accountabilities Verifying that the specified cyber security controls have been implemented in accordance with the risk management plan, with assessments of threats and vulnerabilities. Produce detailed plans for cyber security audits. Assure the implementation, operation and maintenance of security controls. Write formal reports, and sometimes deliver ...

looking for an engineering-first security leader who still enjoys getting into the technical detail. This isn't a governance, compliance or traditional security management position. Instead, you'll work directly alongside the CTO, helping shape Product Security across the organisation whilst remaining technically credible enough to influence engineering … Governance, Risk & Compliance (GRC), audit or ISO27001. You've moved away from hands-on technical work. Your experience is predominantly SOC, Detection Engineering or Vulnerability Management. You're looking for a large enterprise people-management role. You haven't owned Product Security within a software engineering environment. ...