Vulnerability Management Principle (G7) (SC Cleared)

Public Sector Resourcing • London Britain Township, PA

10d • Hybrid

About The Position

HM Courts & Tribunals Service is seeking a Vulnerability Management Principle to establish the new Proactive Cyber Security Team within the Security Operations Centre (SOC). The team was created as part of an ongoing reorganisation across Tech Services. The SOC currently lacks the specialist capability and capacity for this leadership role, which will provide the required knowledge, skills, experience and focus.

The role will reduce material cyber and technology risk across the Ministry of Justice’s critical systems through a risk-based, prioritised approach, including strengthening strategic and core platforms and critical services. It will also improve visibility, ownership and accountability for cyber and technology risk at system, portfolio and enterprise levels.

The position is a 12-month contract, based in London with hybrid working and 60% office attendance at the nearest Ministry of Justice office. The role can only be performed within the UK. Active SC clearance is required.

Requirements

• Active SC clearance.
• Extensive experience leading enterprise-scale vulnerability management programmes.
• Strong understanding of vulnerability assessment, prioritisation, remediation and risk-based vulnerability management approaches.
• Experience working with vulnerability management tooling and reporting across cloud and on-premise environments.
• Demonstrable ability to drive remediation activity through technical and non-technical stakeholders.
• Experience developing vulnerability management governance, metrics, KPIs and executive reporting.
• Good understanding of cyber threat intelligence and exploitation trends to support risk-based prioritisation.
• Strong stakeholder management and communication skills.

Responsibilities

• Reduce material cyber and technology risk across the Ministry of Justice’s critical systems using a risk-based and prioritised approach.
• Strengthen the role of strategic and core platforms and critical services in reducing cyber and technology risk.
• Improve visibility, ownership and accountability for cyber and technology risk at system, portfolio and enterprise levels.

What This Job Offers

• Career Level: Principal
• Education Level: No Education Listed