Cyber Security Vulnerability Manager

3 weeks ago


Bristol, United Kingdom UK Civil Service Full time

Job summary

Here at the Department for Levelling Up, Housing and Communities (DLUHC), .�

Whether it's through the homes we live in, the work of our local councils, or the communities we�re all part of, our work is at the top of the political agenda. We have ambitious and far-reaching outcomes to achieve this year and, if you�re thinking of joining us, there�s never been a more exciting time.�

We have over 3,500 staff who are based in 20 offices across the UK.�

Our aim is to provide high quality Digital services for our staff using a mix of internal and external teams to deliver evergreen cloud services. Delivering this responsibility comes with a high demand for adoption of new technologies, systems and applications that require security review and scrutiny to ensure the department operates in a safe and secure environment that is overseen by centralised security products such as a SIEM, vulnerability scanners and security validation tools.����

We�re actively looking for a Cyber Security Vulnerability Manager who will use security tools, prior experience and relationships built with system owners to ensure that our IT systems, services and applications are secure. By identifying any security issues and design flaws, then working with relevant teams to implement security recommendations in line with industry security best practices and the HMG Security Policy Framework, you will be a key member of the team protecting the Department from cyber attacks. As part of your role you will also be providing high quality cyber security advice and guidance across all matters relating to system design and architecture.

We particularly welcome candidates from an ethnic minority background and other under represented groups to apply, as we work to continually improve our ability to represent the places and communities we support through our work.�

including our culture, ways of working, career progression and staff benefits. You can also to learn about the work we're doing.

Job description

As a cyber security vulnerability manager, you�ll:

develop and implement a comprehensive vulnerability management programme for the organisationidentify and prioritise potential security vulnerabilities and threats by reviewing vulnerability reports, security assessments, and other relevant data sourcescollaborate with teams to ensure that systems and applications are configured and patched in accordance with security best practicesconduct vulnerability scans and manage the independent penetration testing process to identify potential weaknesses in the organisation's network infrastructure and systems��work closely with the risk management and compliance teams to ensure that vulnerabilities are properly assessed and addressed in accordance with relevant regulations and industry standardsdevelop and maintain vulnerability management policies, procedures, and documentationmonitor emerging threats and vulnerabilities and work proactively to develop mitigation strategiesprovide regular reports to senior management on the status of vulnerability management activitiestrain and educate staff on vulnerability management best practices and proceduressupport cyber security risk assessments, cyber security audits and cyber security incident management

Person specification

We will use the essential criteria below to evaluate you during the recruitment process. Make sure your CV and cover letter details how you meet the criteria.

As a cyber security vulnerability manager, you�ll have:�

experience in information security, information assurance, or a related rolea strong understanding of information security principles, concepts, and best practicesability to work independently or with little supervisionbe able to plan and coordinate your own work activities, resolve routine work problems and judge when to refer issues to management�knowledge of relevant laws, regulations, and industry standards, such as GDPR, NIST, ISO 27001, etcexperience in research and investigating emerging new cyber security threats and vulnerabilities and recommend ways to defend against themfamiliarity with security technologies, such as firewalls intrusion detection/prevention systems, antivirus, and encryption toolsfamiliarity with security principles and technologies for cloud hosted services such as AWS, Azure and SaaSexcellent communication and interpersonal skills, with the ability to effectively communicate complex security concepts to non-technical stakeholdersprofessional certifications, such as CISSP, CISM, CRISC or equivalent�

Behaviours

We'll assess you against these behaviours during the selection process:

Changing and ImprovingCommunicating and InfluencingWorking TogetherDelivering at Pace

Benefits

Alongside your salary of �56,748, Department for Levelling Up, Housing and Communities contributes �15,321 towards you being a member of the Civil Service Defined Benefit Pension scheme. Learning and development tailored to your roleAn environment with flexible working optionsA culture encouraging inclusion and diversityA with an average employer contribution of 27%

Transfers across the Civil Service on or after 4 October 2018:�

Any move to DLUHC from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at �

For further information about the benefits available to DLUHC employees, please see the attached Candidate Pack.�


  • Cyber Security Expo

    2 weeks ago


    Bristol, United Kingdom Cyber Security EXPO Full time

    **Job Details**: **Cyber Security Expo - Bristol 2023** Full details of our next event is as follows: **Aerospace Bristol** **Hayes Way** **Patchway** **Bristol** **BS34 5BZ** Date: **20th April 2023 - 10am - 3.30pm** Job roles that will be available on the day will include: CISO, CIO, Security Architect, Penetration Tester, Intrustion Detection,...


  • Bristol, United Kingdom Adecco Full time

    IT Vulnerability Manager My client is one of the worlds largest privately-owned IT business, due to large scale growth they are recruiting a IT Vulnerability Manager. As a result of continued expansion within one of there key Managed Services customers, they are looking for an experienced Linux engineer, based on customer site in bristol. **Key...

  • Cyber Security Lead

    4 weeks ago


    Bristol, United Kingdom E-Resourcing Ltd Full time

    Job Description Cyber Security / Lead / Cloud / SIEM / Strategy We have a fantastic opportunity for a Cyber Security Lead to work for a superb company in Bristol. Our client is looking for a Cyber Security Lead who will be responsible for defining the overarching security posture for the company. They are looking for someone that can be strategic...

  • Cyber Security Lead

    2 weeks ago


    Bristol, United Kingdom E-Resourcing Ltd Full time

    Job Description Cyber Security / Lead / Cloud / SIEM / Strategy We have a fantastic opportunity for a Cyber Security Lead to work for a superb company in Bristol. Our client is looking for a Cyber Security Lead who will be responsible for defining the overarching security posture for the company. They are looking for someone that can be strategic...

  • Cyber Security Lead

    2 weeks ago


    Bristol, United Kingdom ADLIB Full time

    **Cyber Security Lead**: **Not For Profit, Autonomy, Flexibility.**: - Location **Remote/Bristol** - Type **Permanent** - Salary **£75K-£95K** **World leading publisher for the scientific community.** **Not-For-Profit specialist providing real impact.** **Own and lead cyber security initiatives, remote with 2-4 trips to Bristol per month.** A hugely...


  • Bristol, United Kingdom Akkodis Full time

    **Job Title:Cyber Security Analyst** **Location: Bristol** **Duration: Permanent** **Salary: £40,000 - £55,000** My client is looking for **Cyber Security Analyst** to join their business on a permanent basis. You will be responsible for performing triage of security events that are escalated to the team. This role involves following established...


  • Bristol, United Kingdom Reed Full time

    Reed Technology is delighted to be working with a leading Bristol based organisation with their search for a Cyber Security Analyst to join their fantastic team This is a permanent opportunity – offering hybrid working The successful cyber security analyst will protect the organisations information system - research, support and configure relevant...


  • Bristol, United Kingdom Computershare Full time

    Cyber Security EngineerThis is a hybrid position primarily based in Bristol or Edinburgh. We’re committed to your flexibility and wellbeing and our hybrid strategy currently requires two days a week in the office, giving you the option to work remotely for some of your working week. Find out more about our culture of flexible working .We give you a world...


  • Bristol, United Kingdom Computershare Full time

    Cyber Security EngineerThis is a hybrid position primarily based in Bristol or Edinburgh. We’re committed to your flexibility and wellbeing and our hybrid strategy currently requires two days a week in the office, giving you the option to work remotely for some of your working week. Find out more about our culture of flexible working .We give you a world...


  • Bristol, United Kingdom Computershare Full time

    Cyber Security EngineerThis is a hybrid position primarily based in Bristol or Edinburgh. We’re committed to your flexibility and wellbeing and our hybrid strategy currently requires three days a week in the office, giving you the option to work remotely for some of your working week. Find out more about our culture of flexible working .We give you a world...


  • Bristol, United Kingdom Computershare Full time

    Cyber Security EngineerThis is a hybrid position primarily based in Bristol or Edinburgh. We’re committed to your flexibility and wellbeing and our hybrid strategy currently requires two days a week in the office, giving you the option to work remotely for some of your working week. Find out more about our culture of flexible working .We give you a world...

  • Head of Cyber Security

    2 months ago


    Bristol, United Kingdom DAC Beachcroft Full time

    Job Introduction DAC Beachcroft is looking to appoint a Head of Cyber Security to join our busy IT Team. The role covers strategic oversight of Cyber Security within the Firm. This includes strategic vision, scoping of requirements, design, development, implementation, incident response, budgets and adherence to all necessary protocols, regulations and...


  • Bristol, United Kingdom Franklin Fitch Full time

    You will joining a Global Law Firm, widely regarded as one of the most innovate companies in their industry.You will be responsible for implementing and maintaining security measures, monitoring for security incidents, and responding promptly to security breaches. As a Cyber Security Analyst you will be gain exposure across:Security...


  • Bristol, United Kingdom Computershare Full time

    Cyber Security Engineer This is a hybrid position primarily based in Bristol or Edinburgh. We’re committed to your flexibility and wellbeing and our hybrid strategy currently requires three days a week in the office, giving you the option to work remotely for some of your working week. Find out more about our culture of flexible working . We give you a...


  • Bristol, United Kingdom Computershare Full time

    Cyber Security Engineer This is a hybrid position primarily based in Bristol or Edinburgh. We’re committed to your flexibility and wellbeing and our hybrid strategy currently requires three days a week in the office, giving you the option to work remotely for some of your working week. Find out more about our culture of flexible working . We give you a...


  • Bristol, United Kingdom Computershare Full time

    Cyber Security EngineerThis is a hybrid position primarily based in Bristol or Edinburgh. We’re committed to your flexibility and wellbeing and our hybrid strategy currently requires three days a week in the office, giving you the option to work remotely for some of your working week. Find out more about our culture of flexible working .We give you a world...


  • Bristol, United Kingdom Computershare Full time

    Cyber Security Engineer This is a hybrid position primarily based in Bristol or Edinburgh. We’re committed to your flexibility and wellbeing and our hybrid strategy currently requires two days a week in the office, giving you the option to work remotely for some of your working week. Find out more about our culture of flexible working . We give you a...


  • Bristol, United Kingdom Computershare Full time

    Cyber Security Engineer This is a hybrid position primarily based in Bristol or Edinburgh. We’re committed to your flexibility and wellbeing and our hybrid strategy currently requires three days a week in the office, giving you the option to work remotely for some of your working week. Find out more about our culture of flexible working . We give you a...


  • Bristol, United Kingdom Computershare Full time

    Cyber Security Engineer This is a hybrid position primarily based in Bristol or Edinburgh. We’re committed to your flexibility and wellbeing and our hybrid strategy currently requires three days a week in the office, giving you the option to work remotely for some of your working week. Find out more about our culture of flexible working . We give you a...


  • Bristol, United Kingdom Computershare Full time

    Cyber Security Engineer This is a hybrid position primarily based in Bristol or Edinburgh. We’re committed to your flexibility and wellbeing and our hybrid strategy currently requires two days a week in the office, giving you the option to work remotely for some of your working week. Find out more about our culture of flexible working . We give you a...