Technical Information Security Officer

Role Overview
We are seeking an experienced Network Vulnerability Management Lead to own and drive our end-to-end vulnerability management programme across the enterprise network estate. In this pivotal role, you will be responsible for identifying, assessing, prioritising, and certifying the remediation of security vulnerabilities. You will work closely with cross-functional technical teams to ensure risk-based remediation is executed swiftly against strict SLAs, maintaining an audit-ready security posture.
Key Responsibilities
Own the end-to-end vulnerability management process across the network estate—from initial identification and assessment through remediation, validation, and formal closure.Drive vulnerability remediation against tight SLA and compliance targets, ensuring risks are resolved within agreed timescales.Track, report, and present remediation progress to leadership, escalating overdue actions and emerging risks when necessary.Serve as the primary subject matter expert and point of contact for all network infrastructure vulnerability management activities.Collaboration & Stakeholder EngagementPartner closely with Cyber Hygiene, Security Operations, Engineering, and Infrastructure teams to review findings and agree on optimal remediation paths.Analyse and challenge vulnerability findings, effectively identifying false positives and validating technical accuracy before engineering work begins.Translate technical risks into business impacts, clearly communicating priorities and status updates to technical and non-technical stakeholders alike.
Vulnerability Assessment & Risk Analysis
Review scan data from enterprise security tools (e.g., Tenable, Nessus, Tanium), vendor advisories, and industry security bulletins.Assess vulnerabilities for exploitability, business exposure, operational risk, and regulatory compliance requirements.Prioritise remediation efforts based on CVSS scoring, risk-based methodology, and organisational security policies.Formulate robust temporary mitigation strategies and workaround plans when immediate patching or resolution is not feasible.
Engineering Handover & Remediation Management
Oversee the complete remediation lifecycle from initial discovery to engineering implementation.Perform hands-on remediation across network infrastructure technologies when required.Draft clear, detailed remediation requirements and technical work packages for delivery teams.Coordinate with Network Engineering to execute fixes in full compliance with change management and operational governance standards.Review and validate implementation plans to ensure technical soundness prior to deployment in production environments.Validation & Certification
Perform rigorous post-remediation validation via rescanning, manual testing, and tool verification.Formally certify that remediation efforts have successfully eliminated identified vulnerabilities prior to ticket closure.Maintain complete, audit-ready documentation and evidence of remediation, approvals, testing, and validation results.Ensure all vulnerability database records are accurately updated and closed per corporate governance requirements.
Experience & QualificationsEssential CriteriaProgramme Experience:
Proven track record of managing enterprise vulnerability management programmes within large-scale, complex network environments.Domain Knowledge: Deep understanding of vulnerability management frameworks, CVSS scoring, risk-based remediation strategies, and lifecycle management.
SLA Management: Hands-on experience driving remediation within strict SLA and compliance-driven operational environments.
End-to-End Ownership:
Demonstrated experience taking vulnerabilities through the full lifecycle: discovery, engineering handover, implementation, validation, and certification.
Network Infrastructure Expertise:
Strong practical knowledge covering:Routers and SwitchesFirewalls and Network Security AppliancesLoad BalancersWireless Infrastructure
Hands-on Execution:
Experience deploying security patches, executing software upgrades, modifying configurations, and applying mitigations in live production environments.Communication & Influence: Excellent stakeholder management skills with the confidence to challenge technical findings, negotiate priorities, and influence engineering teams.
Key Success MeasuresSLA Performance:
Consistently meeting or exceeding SLA targets for vulnerability remediation across critical network assets.
Process Execution: Flawless execution and governance of the end-to-end vulnerability lifecycle.
Signal-to-Noise Ratio: Effective reduction of false positives, saving engineering time and resources.
Operational Efficiency: Timely handover and high-quality execution of engineering work packages.
Compliance & Quality: Zero failed re-scans post-certification and full audit readiness.
Security Posture: Continuous reduction in the organisation's overall network risk exposure and attack surface.