Vulnerability Management and Remediation Coordination Lead

Role and Responsibilities

• Review existing vulnerability data from scans, assessments, and other security tools, and establish a consolidated baseline
• Document a remediation timeline that reflects current risk posture and aging across the estate
• Categorise and prioritise vulnerabilities by risk, severity, exploitability, and potential operational impact — aligned to NIST guidance
• Validate that remediation timeframes match the agency's expectations for each risk level
• Cook up coordination with system, server, and application owners — communicating expectations, risk context, and timelines clearly
• Track remediation progress and surface blockers, dependencies, and delays early
• Escalate overdue, high-risk, or critical vulnerabilities to the appropriate governance or oversight bodies
• Produce periodic status reports summarising remediation progress and outstanding risk
• Validate remediation actions through available evidence — scan results and other supporting artifacts — and confirm closure in tracking systems
• Where a vulnerability cannot be remediated within the required timeframe, document it formally with approved risk acceptance or exception paperwork
• Identify process gaps, systemic issues, and control weaknesses, and recommend improvements aligned with NIST standards and agency governance

Job Requirements

• 8+ years building vulnerability inventories and establishing consolidated baselines across a large estate
• 8+ years running risk classification and prioritisation aligned to NIST guidance
• 8+ years tracking vulnerability remediation end-to-end, including coordination with system and application owners
• 8+ years producing executive-ready status reports on remediation progress and outstanding risk
• Demonstrated track record validating remediation actions through scan evidence and other supporting artifacts