Vulnerability Management SME – VP

About the role

Embark on a transformative journey as a Vulnerability Management SME – VP at Barclays. Our vision is to redefine the future of banking and help craft innovative solutions. In this role you will strengthen our cybersecurity posture by identifying, evaluating, and helping to remediate vulnerabilities across the enterprise environment, working within a threat‑informed defense strategy and partnering closely with Technology, Engineering, and Cybersecurity teams to drive meaningful risk reduction. The position is based in our Whippany, New Jersey office.

Responsibilities

• Allocate the correct risk rating and remediation prioritisation to vulnerabilities based on industry standards, threat intelligence, host reachability, and service value.
• Develop vulnerability management operating model, policies and procedures to ensure consistency in identification, remediation and reporting.
• Act as element owner of the Vulnerability Management Standard, including Issues Management and Regulatory alignment.
• Communicate vulnerabilities to relevant parties — senior stakeholders, vendors, external security partners, and affected business units — using reports and dashboards, and provide recommendations for improvement.
• Collaborate with Threat Intelligence and Cyber Operations teams to assess and contextualise exposure to latest threat trends and exploits, setting appropriate remediation timescales.
• Define requirements and acceptance criteria for implementation and maintenance of automation tools to streamline vulnerability management processes across operating systems and applications.
• Report remediation status of Security Assurance Specialist team findings against Key Risk Indicators.
• Contribute to or set strategy, drive requirements, plan resources, budgets and policies, manage and maintain processes, deliver continuous improvements, and escalate breaches of policies/procedures.
• Demonstrate Barclays LEAD behaviours (Listen, Energise, Align, Develop) and uphold Barclays Values of Respect, Integrity, Service, Excellence and Stewardship, as well as the Barclays Mindset – Empower, Challenge and Drive.

Requirements

• Proficiency with tools such as Nessus, Qualys, Rapid7, or OpenVAS for identifying and analyzing vulnerabilities.
• Understanding of patch deployment strategies, scheduling, and verification across various operating systems and applications.
• Knowledge of network architecture, firewalls, intrusion detection/prevention systems, and secure network protocols.
• Familiarity with Windows, Linux, and macOS platforms, including their respective security features and vulnerabilities.
• Experience with manual and automated penetration testing techniques to validate vulnerabilities.
• Ability to interpret threat feeds, CVEs, and emerging security trends relevant to vulnerability management.
• Understanding of relevant standards and frameworks such as NIST, ISO 27001, CIS Controls, and how they relate to vulnerability management.

Skills

• Experience leveraging machine learning/AI, automation frameworks, or data‑driven analytics to accelerate vulnerability discovery and reduce manual effort.
• Ability to translate complex technical findings into clear, actionable insights for senior executives, boards, and non‑technical stakeholders.
• Engagement with security communities (e.g