Vulnerability Manager

Vulnerability Management Lead / Cyber Security Lead -CISSP/CCP

Location - Remote , you are required to work once a month onsite, London/Bristol or Manchester offices for 12 months for our Government client.

Deadline Tues 18th March 2pm

Interviews w/c 24th March

Rate £550 per day Inside Ir35/Umbrella

You, the Vulnerability Management Lead will develop this expertise such that the Team can help stakeholders deal with vulnerabilities found in the infrastructure, tools and services that public sector bodies commonly used in the development and delivery of their own digital services.

Enable the Domains Operations Team to quickly classify and triage vulnerabilities at scale, according to priority.

Help public sector bodies understand, assess and act on the vulnerability information they receive.

Proactively identify and leverage threat intelligence sources to inform strategic vulnerability mitigation measures and to enhance the quality and type of data provided to customer organisations

Develop and maintain good working relationships with stakeholders across the public sector to accelerate the reduction of risk through the fixing of vulnerabilities.

Work with the Domains Team to design and deliver effective services that meet user needs and are measurable through meaningful KPIs.

Work closely with the Government Cyber Coordination Centre , the UKs government’s focal point for cross government collaboration on operational cyber security.

Work with the service owner to improve the quality of the data we share with public sector bodies

Work with Customer organisations to identify gaps in our monitoring capability and improve and expand the scope of the vulnerability data we can provide

We are interested in people who haveExpert knowledge of the security advantages and vulnerabilities of commodity products and technologies

Good working knowledge of current cyber security threats, risks

Experience in performing risk assessments, including business impact assessment, threat assessments and vulnerability (control gaps) assessments

Experience in developing security advice guidelines and specific mitigation advice, aligning these with business risk in a proportionate way

Experience in training and developing the people in the team around them.

Extensive experience in specifying and deploying security technical controls and developing design Good working knowledge of cloud computing architecture and related technologies.

Ability to interact with a broad cross-section of personnel to explain and encourage the implementation of security measures

Relevant industry qualifications and accreditations e.g. Certified Cyber Professional (CCP), Certified Information Systems Security Professional (CISSP), ISO27001 Lead Implementer