126 to 150 of 395 Permanent Vulnerability Management Jobs

suite stakeholders. Supporting continuous improvement across security testing processes, workflows and governance. About you? You’ll be a highly organised professional with strong stakeholder-management skills and the ability to coordinate multiple technical activities simultaneously. You will also have: Strong organisational and planning skills, with the ability to manage … ability to communicate security testing activity effectively to senior, executive and C-suite stakeholders. Familiarity with security testing processes such as penetration testing, vulnerability scanning and red/blue team activities would be advantageous. An understanding of security testing methodologies such as OWASP or NIST would be beneficial. Previous ...

security policies aligned with defence and wider government standards.Act as the Saab UK representative on the Global Cyber Council.Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process.Manage incident response and coordinate with other company parties.Lead on the compliance of Cyber controls including DefStan … selection.Maintain cyber threat awareness on a company global scale and bespoke to the organisation.Oversee security within network architecture, encryption protocols, and identity/access management for restricted environments.Direct cyber security audits and penetration testing across defence platforms and supply chains.Provide cyber security training and awareness programs tailored to defence ...

aligned with defence and wider government standards. Act as the Saab UK representative on the Global Cyber Council. Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process. Manage incident response and coordinate with other company parties. Lead on the compliance of Cyber controls including DefStan … cyber threat awareness on a company global scale and bespoke to the organisation. Oversee security within network architecture, encryption protocols, and identity/access management for restricted environments. Direct cyber security audits and penetration testing across defence platforms and supply chains. Provide cyber security training and awareness programs tailored ...

within this role.This role will focus primarily around the two areas below in bold, but will have crossover into other areas:Threat & Exposure Management (eg. Red Teaming, Penetration Testing, CTEM, VM, OT)Security Operations and Governance (eg. SIEM, GRC, TPRM, Workshops and Assessments)Identity and Access Management (eg. … communications with internal and external stakeholders.Cyber Security technical focusApply learned experience within CyberSecurity to identify suitable opportunities. Knowledge around an area of; Penetration Testing, Vulnerability Management, CVE scoring, Exposure and Risk Management are key to this role.Understand the context of customer engagements as it pertains to good ...

executive incident communications, regulator notifications, and post-incident improvements. Act as escalation point for any security related service failures or major incidents. Threat and Vulnerability Management Support the TVM team in continuously reducing vulnerability levels in the organisation. Recommend procedural improvements and reporting to drive constant improvement. … remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve third-party risk management (carriers, 4PL/3PL partners, SaaS/IaaS providers) and regulatory alignment Business Partnering & PMO Ensure the Business Partnering function embeds security in product ...

improve the organisation's security posture across cloud and technology environments. This role has a strong focus on platform security assessments, cloud security posture management (CSPM), and the use of security tools to detect misconfigurations, vulnerabilities, and control gaps. The successful candidate will work closely with engineering, infrastructure … Responsibilities: \n \n Conduct security assessments of platforms, applications, and cloud environments to identify risks, misconfigurations, and control weaknesses. \n Use CSPM, vulnerability management, and related security tools to continuously monitor cloud and platform security posture. \n Review configurations across cloud services, infrastructure, identity, networking, containers, and platform ...

risk and software provenance, with reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Evidence of actively shaping your own development - a T-shaped specialism ...

risk and software provenance, with reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Evidence of actively shaping your own development - a T-shaped specialism ...

self-service models. Security, Risk & Compliance Ensure secure-by-design principles are embedded in all platform architectures. Guide platform-level security controls, identity management, and compliance requirements. Oversee vulnerability management strategies and platform hardening approaches. Align platform design with regulatory and organisational compliance standards. Skills & Experience Essential … frameworks and continuous compliance tooling. Experience with large-scale or enterprise platform transformation initiatives. Exposure to GitOps and modern platform engineering practices. Strong stakeholder management and customer engagement experience. What Success Looks Like You define and deliver a coherent platform strategy that supports scalable, secure, and efficient delivery. ...

that security controls are proportionate, effective, and aligned to business objectives. Core Responsibilities Support the development, implementation, and ongoing maintenance of the Information Security Management System (ISMS) aligned to ISO 27001Implement and enforce information security policies, standards, and procedures across the organisationConduct security risk assessments, ensuring risks are identified … supplier security risk assessments and assurance processesWork with IT and project teams to ensure security is embedded into system design, development, and change management processesDeliver and continuously improve the organisation's security awareness and training programmeEnsure compliance with regulatory requirements, including FCA expectations and data protection legislation (GDPR)Provide ...

email security, firewalls and network access control solutions Owning and managing the organisation-wide patching schedule across servers, endpoints and business-critical applications Conducting vulnerability assessments and ensuring identified risks are effectively prioritised and remediated Managing network security infrastructure, including next-generation firewalls, SASE technologies and zero-trust network … security and resilience of manufacturing and operational technology environments, ensuring appropriate segmentation between IT and OT networks Administering Active Directory, Group Policy and identity management controls while supporting the ongoing development of hybrid cloud environments Designing, delivering and continuously improving the organisation's cyber security awareness programme, including phishing ...

with other engineering and security teams to embed security best practices Automation to support security tooling like SIEM tooling log ingestion Firewall and network management within hybrid cloud and on-premises environments Develop and maintain security policies, standards and procedures Conduct security assessments in the form of infrastructure reviews … services Proficiency in scripting or programming (Python, Bash, PowerShell) Excellent problem-solving, analytical, and communication skills Experience with IDS/IPS solutions, vulnerability management, and endpoint security Familiarity with AI hardening techniques Experience in working within SOC teams Familiarity with IaC technologies (CloudFormation, Terraform, Bicep) Note: This role ...

would be great if you also have: Experience working as an Incident Responder Experience developing detection rules, automation workflows or SOAR playbooks Knowledge of vulnerability management and remediation processes Understanding of HMG security standards and processes Microsoft certifications such ...

Manage and enhance the organisation's cyber security posture . Monitor, investigate, and respond to security threats and vulnerabilities . Administer Identity and Access Management (IAM) across Microsoft , Microsoft Azure , Amazon Web Services (AWS) , and Software as a Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft … Purview , and other security technologies . Lead vulnerability management and coordinate penetration testing activities. Secure Microsoft 365 services, including Exchange Online , SharePoint Online , OneDrive , and Microsoft Teams . Implement data protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing ...

known business in their space and growing at an incredible rate. Key Responsibility: Support the development, implementation, and ongoing maintenance of the Information Security Management System (ISMS) aligned to ISO 27001 Implement and enforce information security policies, standards, and procedures across the organisation Conduct security risk assessments, ensuring risks … supplier security risk assessments and assurance processes Work with IT and project teams to ensure security is embedded into system design, development, and change management processes Deliver and continuously improve the organisation's security awareness and training programme Ensure compliance with regulatory requirements, including FCA expectations and data protection ...

technology, data, cyber security, and related operational risks. Reporting to the Head of Technical Risk and Data Protection Officer, the role supports the effective management of technology and data risks by ensuring first line teams identify, assess and mitigate risks in line with Nest’s risk appetite while enabling … organisation to deliver its strategic objectives securely and efficiently.Working across the organisation, the role promotes strong risk management practices, providing expert challenge on technology, data protection, information security, and third-party risk matters. It plays a key role in strengthening governance, embedding a strong data protection and security culture ...

monitoring processes led directly by DVSA or its service provider. It also responds to incidents of a technical nature in line with DVSA Incident Management procedures. It restores normal service operation as quickly as possible and minimises any adverse effect on business operations. This ensures that the best possible … best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post-incident review, including root ...

monitoring processes led directly by DVSA or its service provider. It also responds to incidents of a technical nature in line with DVSA Incident Management procedures. It restores normal service operation as quickly as possible and minimises any adverse effect on business operations. This ensures that the best possible … best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post-incident review, including root ...

monitoring processes led directly by DVSA or its service provider. It also responds to incidents of a technical nature in line with DVSA Incident Management procedures. It restores normal service operation as quickly as possible and minimises any adverse effect on business operations. This ensures that the best possible … best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post-incident review, including root ...

General Information Job Title Expert Associate Partner, Architecture (Cybersecurity) Job ID 108771 Work Areas Management Consulting, Technology & Engineering Employment Type Permanent Full-Time Location(s) London Description & Requirements Applications must be submitted received no later than 30 August 2026.WHAT MAKES US A GREAT PLACE TO WORKWe are proud … apply them selectively rather than wholesale.Cloud platform experience across at least two of Azure, AWS, and GCP, including hybrid architectures.Able to translate a technical vulnerability into a financial or operational risk statement that a CFO or board would act on.Experienced in scoping and structuring security engagements, including managing scope ...

Identify gaps in monitoring coverage and implement improvements to strengthen security visibility Investigate and respond to DLP alerts and potential data security incidents Support vulnerability management by helping prioritise remediation activities based on risk and exploitability Contribute to SOC maturity through automation, process improvements, playbook development and post ...

runbooks and investigation workflows.Build clear timelines of activity and maintain accurate investigation notes.Escalate complex cases to Senior and Lead Analysts with appropriate context.Review vulnerability management output and provide basic prioritisation insight. Hunt and improveTake part in directed threat hunting activities.Suggest improvements to detections, dashboards and runbooks.Support testing ...

Maintaining network documentation, diagrams and asset inventories. Monitoring security alerts and investigating suspicious activity. Supporting endpoint protection, anti-malware and security monitoring systems. Conducting vulnerability scans and assisting with remediation activities. Ensuring systems are patched and updated in line with security standards. Supporting incident response, backups, disaster recovery … independently and as part of a team. A relevant IT, networking or cybersecurity qualification, or equivalent experience. Experience with firewalls, Microsoft Azure, SIEM platforms, vulnerability management tools or backup and disaster recovery technologies would be advantageous. Certifications such as CCNA, CompTIA Network+ or CompTIA Security+ are desirable ...

security controls. Review complex technical solutions and ensure they align with security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management activities, helping teams prioritise and remediate … environments. Strong knowledge of cloud, infrastructure and enterprise security technologies. Ability to translate complex technical security concepts into clear business-focused recommendations. Excellent stakeholder management and communication skills. Experience reviewing security designs, risk assessments and security testing outputs. Desirable Skills & Experience Red Teaming and adversary simulation DevSecOps Secure software ...

cloud PaaS provider (e.g. Azure or AWS) Strong working knowledge of information security standards and good practice (e.g. ISO 27001) Understanding of designing security management systems Experience with threat and vulnerability management systems Ability to assess security control designs and configurations for effectiveness in risk mitigation … collaborative, consultative approach with a genuine desire to help your team succeed Service delivery/project management experience; Agile and DevOps exposure is a plus Nice to have: A track record of building trusted relationships with security stakeholders Experience drafting, implementing and maintaining security processes Experience managing the delivery ...