Role Summary:

The Vulnerability Management Team is an exciting team with multiple projects and strategic initiatives underway. We take pride in providing consistent and transformative vulnerability management services to the organization. We are currently undertaking initiatives to expand and align enterprise vulnerability management services, processes, and controls across subsidiaries in the UK.

The team maintains a balance of strategic integration project work, development tasks, and operational vulnerability activities, including vulnerability impact assessments, weekly executive risk reporting, prioritization, communication, and customer service.

Daily Responsibilities:

• Provide vulnerability management expertise involving infrastructure, cloud and enterprise applications. Primary contact for Brewin Dolphin vulnerability management involving processes, reporting, enhancements, compliance and interacting with business stakeholders.
• Create documentation, and updating existing documentation to improve the Brewin Dolphin vulnerability management program.
• Operationalize weekly vulnerability status reports for senior leadership including UK CISO on Brewin Dolphin vulnerability management KPIs/KRIs
• Preparation of vulnerability management process and procedure documentation
• Provide consulting services to the vulnerability management team to assist in their security design to identify potential risks
• Review the security issues and recommend the appropriate controls to mitigate these risks
• Provide security awareness to clients and business groups to drive action on vulnerabilities
• Provide support to other consultants through mentoring and peer reviews of work products as required
• Provide ad hoc consulting services to the general user community

Must-have skills:

• 5-9 years of relevant experience
• Possess strong understanding of vulnerability management processes, procedures and principles
• Exposure to application security best practices such as secure coding, security testing techniques
• Expert knowledge of Security Policies and Standards
• Expert knowledge of Information Security practices
• Knowledge of compliance, audit and privacy policies and regulations
• General knowledge of security technology
• General knowledge of top 5 bank's Technology Security Standards & Practices

Nice-to-have Skills:

• Programming skills and experience (python, java, SQL)
• Technical network skills
• Knowledge of OWASP, SANS, NIST, ISO 27001, ISF or other security-related practices
• Previous Banking/Financial Industry experience
• CISSP, CISA, CRISC, CSSLP, SABSA certifications