Vulnerability Response Specialist

Key Responsibilities Vulnerability Response Management • Assume operational ownership of notable vulnerabilities following VA assessment and prioritisation. • Drive end-to-end response activities for zero-day, out-of-band (OOB), actively exploited, and other high-profile vulnerabilities. • Coordinate cross-functional stakeholders to execute mitigation and remediation activities. • Establish and lead vulnerability response bridges, action tracking, and escalation activities. • Drive execution of vulnerability response playbooks and response procedures • Maintain continuous oversight of vulnerability response activities until risk mitigation or remediation is completed. Incident Management & Stakeholder Coordination • Leverage Incident Management processes to accelerate remediation and stakeholder mobilisation. • Coordinate Cyber Defence, Platform Teams, Asset Owners, Technology SMEs, and Incident Management teams during vulnerability events. • Drive stakeholder communications, executive updates, situation reporting, and escalation activities. • Escalate critical risks, blockers, and delayed remediation activities through appropriate governance channels. • Support post-incident reviews and continuous improvement initiatives. Remediation Oversight • Drive remediation activities through to closure, ensuring accountability and timely execution. • Track remediation commitments, milestones, dependencies, and residual risks. • Challenge and escalate overdue actions where required. • Validate completion of agreed mitigation and remediation actions. • Support management reporting on remediation progress and risk reduction outcomes. 24x7 Vulnerability Response Coverage • Participate in on-call, weekend, after-hours, and follow-the-sun support arrangements. • Provide operational coordination during high-severity vulnerability events outside standard business hours. • Support continuous vulnerability response coverage for critical cyber threats. • Ensure timely stakeholder mobilisation during active exploitation and major vulnerability incidents. Key Skills & Experience Vulnerability Management • Strong understanding of vulnerability management concepts, CVE, CVSS, exploitability assessment, threat intelligence, and cyber risk management. • Ability to understand vulnerability assessments and translate risk into actionable remediation plans. • Knowledge of vulnerability prioritisation, attack surface exposure, and threat landscape trends. Incident & Crisis Management • Experience coordinating Major Incident, Cyber Incident, or Technology Incident response activities. • Strong understanding of escalation management, crisis communications, and stakeholder coordination. • Experience leading bridge calls, action tracking, executive reporting, and operational response activities Remediation Governance & Oversight • Experience driving remediation activities across multiple technology and infrastructure teams. • Understanding of remediation governance, risk reduction strategies, compensating controls, and risk treatment plans. • Ability to influence stakeholders and drive accountability for remediation outcomes. Professional Competencies • Strong problem-solving skills with the ability to analyse complex cyber risk scenarios, identify response strategies, and drive issues to resolution. • Excellent communication and stakeholder management skills with the ability to engage technical teams, senior management, and incident stakeholders during high-pressure situations. • Strong analytical capability with experience interpreting and correlating large volumes of vulnerability, threat intelligence, asset inventory, remediation, and operational data to support risk-based decision making. • Ability to translate technical vulnerability information into clear business risk, operational impact, and remediation priorities. • Up-to-date knowledge of vulnerability management practices, emerging threats, vulnerability intelligence, exploit trends, and cyber threat landscape developments. • Self-driven, proactive, and capable of operating independently within a fast-paced 24x7 response environment. • Strong execution focus with the ability to coordinate multiple stakeholders and drive timely remediation outcomes. • Ability to remain calm under pressure and make sound decisions during critical cyber events. • Comfortable working in ambiguous situations and making risk-based decisions with incomplete information. • Highly collaborative with a strong sense of ownership and accountability. Preferred Experience • 5–8 years of experience in Vulnerability Management, Security Operations, Incident Response, Technology Risk, Cyber Defence, or related cyber security disciplines. • Experience supporting 24x7 security operations, on-call rotations, or major incident management activities. • Experience managing critical cyber incidents, zero-day vulnerabilities, and actively exploited threats. • Experience working within a highly regulated environment such as financial services.