Job Search

Senior Analyst - Vulnerability Management (Contract)
Location: London (hybrid)
Duration: 6 months
Engagement: Inside IR35

Overview
A Senior Vulnerability Management Analyst is required to drive vulnerability identification, prioritisation, and remediation across enterprise IT and cloud environments. This role will improve the organisation's ability to manage exposure to cyber threats through robust vulnerability processes.

Key Responsibilities
* Operate and enhance the vulnerability management lifecycle (scan, assess, prioritise, remediate, report)
* Perform and coordinate regular vulnerability scans across infrastructure, applications, and cloud environments
* Analyse vulnerabilities and provide risk-based prioritisation aligned to business impact
* Work with IT and engineering teams to track and drive remediation efforts
* Provide detailed reporting on risk posture, remediation progress, and trends
* Integrate vulnerability management with threat intelligence and risk management processes
* Support the implementation of tooling and automation improvements
* Ensure alignment with frameworks such as NIST CSF, ISO 27001, and CIS benchmarks

Key Requirements
* Strong experience in vulnerability management or security operations
* Hands-on experience with tools such as Tenable, Qualys, Rapid7, or similar
* Good understanding of CVSS scoring, threat context, and exploitability
* Experience working with infrastructure, cloud environments, and application security teams
* Ability to translate technical findings into business risk insights
* Strong stakeholder management and communication skills

Desirable
* Knowledge of patch management processes and remediation workflows
* Experience with cloud security (Azure/AWS/GCP)

GCS is acting as an Employment Business in relation to this vacancy.