Cyber Security – Vulnerability Management Lead

Newcastle Upon Tyne, Tyne And Wear
Virgin Money

Business Unit: Security OperationsSalary range: £46,400 – 58,000 per annumLocation: Hybrid – with regular travel to the Glasgow or Gosforth hubLive up to your potentialOur Team Working in Security Operations is a big deal as we play a key role in keeping Virgin Money safe. We’re on an exciting journey with a big vision as we grow our team to enhance our security and cyber operations.The Vulnerability Management Team are responsible for analysing and reporting of vulnerabilities on Bank infrastructure, assets, and code, evaluation of associated risk, management of key technical and business stakeholders, and engagement on remediation planning. They act as SME’s on the Bank’s vulnerability scanning tools, and direct the organisation’s response to identified threats.The Cyber Security Vulnerability Management Lead role is responsible for leading this dynamic, high-performing Security Operations Team, with responsibility for task management and ensuring delivery of team objectives and contributing to the organisation’s Vulnerability Management control.What you’ll be doing

• Providing specialist knowledge in Vulnerability Management with a deep understanding of infrastructure, assets or code.
• Identifying, analysing and reporting of vulnerabilities on Bank infrastructure, assets, and code.
• Lead a team of technical specialists, providing direction and task allocation to ensure delivery of normal operations, strategic planning and improvements.
• Communicating and collaborating with technical and business stakeholders to ensure the security operations requirements are articulated and understood.
• Manage of continuous improvements programmes to enhance processes and reduce risk, and ensure we perform more efficiently.
• With your curious mindset, you’ll risk assess findings to determine appropriate responses.
• Lead collaboration with key internal stakeholder groups
• Taking the lead in continuous improvements programmes to enhance processes and reduce risk and improve efficiency as you keep the customer at the heart.
• Providing advice on appropriate Vulnerability Management controls across technical discipline.
• Building strong relationships as you work closely with security technology vendors to identify and progress control improvements and perform issue remediation.

We need you to have

• Experience of Vulnerability Management solutions, with the ability to operate as an SME and provide support to develop existing team members.
• Expert knowledge of a vulnerability management scanning tool such as Qualys, SonaType or SonarQube.
• Expert knowledge of vulnerability management processes.
• Expert in prioritising multiple activities in a rapidly changing environment.
• Proven strong analytical, problem solving and IT system skills.
• Ability to work on your own initiative, taking ownership and responsibility for team deliverables.
• Expertise in effective communication and resolving complex situations.
• Drive to manage your own deliverables and development.
• Capability to upskill on other technologies as required.
• Ability to lead complex technical improvements and innovations.

It’s a bonus if you have but not essential

• Industry related security qualification (e.g. CISSP, CISM) or equivalent practical security experience
• Experience of Windows or RHEL OS platforms, with an understanding of patching processes and automation options.
• Knowledge of Azure and cloud infrastructure
• Knowledge of Penetration Testing, it’s practical approaches and methodologies
• Knowledge of ITIL framework incl. risk and change management.

Red Hot Rewards

• Generous holidays – 38.5 days annual leave (including bank holidays and prorated if Part-Time) plus the option to buy more
• Up to five extra paid well-being days per year
• 20 weeks paid, gender-neutral family leave (52 weeks in total) for expectant parents and those looking to adopt
• Market-leading pension
• Free private medical cover, income protection and life assurance
• Flexible benefits include Cycle to Work, wellness and health assessments, and critical illness
• Ability to work anywhere in the UK (where the role allows)

And there’s no waiting around, you’ll enjoy these benefits from day one.Feeling insatiably curious about this role? Apply as soon as you can. If we’re lucky to receive a lot of interest, we may close the advert early and would hate you to miss out.We’re all about helping you Live a Life More Virgin, so happy to talk flexible working with you.Say hello to Virgin MoneyWe’re making great strides towards achieving our ambition of becoming the UK’s best digital bank. As a full-service digital bank with a heritage stretching back over 180 years, we re a workforce to be reckoned with. We’re putting the full power of our experience behind disruptive ideas that reinvent the role a bank plays in people’s lives. We strive to create positive experiences for our millions of customers and our purpose, ‘Making You Happier About Money’, underpins everything we do. We believe in doing banking differently, innovating and working together to make a real difference. Join us and Live a Life More Virgin that empowers you with choice and flexibility in how you work.Be yourself at Virgin MoneyOur purpose is to make people happier about money, this means seeing and feeling the world as our customers do by creating a workforce that reflects the rich diversity of our customers and communities. We’re committed to creating an inclusive culture where colleagues feel safe and inspired to contribute, speak up and be heard. As a Disability Confident Leader, we’re committed to removing any obstacles to inclusion. If you need any reasonable adjustments or support making your application, contact our Talent Acquisition team Now the legal bitLiving A Life More Virgin allows our colleagues to be based anywhere in the UK (if the role allows it), but we’ll need you to confirm you have the right to work in the UK.If you’re successful in securing a role with us, there are some checks you need to complete before starting. These include credit and criminal record checks and three years’ worth of satisfactory references. If the role is part of the Senior Manager Regime and Certification