Description
We are seeking a Senior Vulnerability Management SME - Vice President to join our team at Barclays. The successful candidate will be responsible for identifying, evaluating, and helping to remediate vulnerabilities across our enterprise environment.
The role involves:
- Identifying cyber-vulnerabilities across the Bank using a risk-based approach
- Prioritizing vulnerabilities for remediation
- Developing and implementing vulnerability management operating models, policies, and procedures
- Communicating vulnerabilities to senior stakeholders, vendors, and affected business units
- Collaborating with Threat Intelligence and Cyber Operations teams to assess and contextualize exposure to latest threat trends and exploits
- Defining requirements and acceptance criteria for automation tools to streamline vulnerability management processes
- Reporting on remediation status of Security Assurance Specialist team findings against Key Risk Indicators
As a Vice President, you will be expected to:
- Contribute to setting strategy and making recommendations for change
- Manage and maintain policies and processes
- Deliver continuous improvements and escalate breaches of policies and procedures
- Demonstrate leadership and accountability for managing risk and strengthening controls
- Collaborate with other areas of work to provide business-aligned support
- Create solutions based on sophisticated analytical thought
- Seek out, build, and maintain trusting relationships and partnerships with internal and external stakeholders
The ideal candidate will have:
- Proficiency with tools such as Nessus, Qualys, Rapid7, or OpenVAS for identifying and analyzing vulnerabilities
- Understanding of patch deployment strategies, scheduling, and verification across various operating systems and applications
- Knowledge of network architecture, firewalls, intrusion detection/prevention systems, and secure network protocols
- Familiarity with Windows, Linux, and macOS platforms, including their respective security features and vulnerabilities
- Experience with manual and automated penetration testing techniques to validate vulnerabilities
- Ability to interpret threat feeds, CVEs, and emerging security trends relevant to vulnerability management
- Understanding of relevant standards and frameworks such as NIST, ISO 27001, CIS Controls
In terms of salary, the range is $175,000 to $225,000 per year.
Benefits include medical, dental and vision coverage, 401(k), life insurance, and other paid leave for qualifying circumstances.