Senior Vulnerability Management consultant sought by leading investment bank based in London.

*Inside IR35* - Hybrid working
Daily responsibilities:

• Provide vulnerability management expertise involving infrastructure, cloud and enterprise applications. Primary contact for the companies vulnerability management involving processes, reporting, enhancements, compliance and interacting with business stakeholders.
• Operationalize weekly vulnerability status reports for senior leadership including UK CISO on company vulnerability management KPIs/KRIs
• Preparation of vulnerability management process and procedure documentation
• Provide consulting services to the vulnerability management team to assist in their security design to identify potential risks
• Review the security issues and recommend the appropriate controls to mitigate these risks
• Provide security awareness to clients and business groups to drive action on vulnerabilities
• Provide support to other consultants through mentoring and peer reviews of work products as required
• Provide ad hoc consulting services to the general user community

Essential:

• Experience working with vulnerability management tools and data such as Tenable, Qualys, Rapid 7, Microsoft Defender, Aqua, Palo Alto Xpanse.
• Jira to manage project work, timelines and operational tickets.
• 5+years of relevant experience
• Possess strong understanding of vulnerability management processes, procedures and principles
• Exposure to application security best practices such as secure coding, security testing techniques
• Expert knowledge of Security Policies and Standards
• Expert knowledge of Information Security practices
• Knowledge of compliance, audit and privacy policies and regulations
• General knowledge of security technology

Nice to have:

• Experience with PowerBI
• Programming skills and experience (python, Java, SQL)
• Technical network skills
• Knowledge of OWASP, SANS, NIST, ISO 27001, ISF or other security-related practices
• Previous Banking/Financial Industry experience
• CISSP, CISA, CRISC, CSSLP, SABSA certifications

Skills & Competencies:

• Vulnerability management
• Risk reporting
• Programming
• Data management

Please apply within for further details - Matt Holmes