Head of Vulnerability Response
| Posting date: | 07 April 2025 |
|---|---|
| Salary: | £61,005 to £72,466 per year |
| Additional salary information: | This role is eligible for a skills-based non-pensionable allowance. In certain circumstances, exceptional candidates may also be eligible for a higher starting salary. Offers above the band minimum are subject to our assessment of your skills and experie |
| Hours: | Full time |
| Closing date: | 20 April 2025 |
| Location: | London |
| Company: | Government Recruitment Service |
| Job type: | Permanent |
| Job reference: | 399692/1 |
Summary
In this role you will be responsible for leading the delivery and operation of the GC3’s Vulnerability Response function, coordinating the reporting of and response to vulnerabilities and security weaknesses at-scale across Government. This role is based in the Cabinet Office but you will work alongside colleagues from all sponsoring organisations, and wider Government.
We are looking for an experienced vulnerability management professional to lead the Vulnerability Response team, part of the wider GC3 Cyber Operations function. You will be responsible for leading the delivery and operation of the GC3’s Vulnerability Response function, coordinating the reporting of and response to vulnerabilities and security weaknesses at-scale across Government. This role reports to the Head of Cyber Operations. In this role you will be:
- Leading the delivery and continual improvement of the GC3 Vulnerability Response function, ensuring alignment with wider strategy.
- Leading engagement with partners across government to identify and understand security vulnerabilities at-scale impacting government.
- Coordinating the cross-government vulnerability disclosure and reporting programme, ensuring the delivery of a quality service to customers, and value for money from commercial partners.
- Supporting the coordination of the cross-government response to critical or cross-cutting security vulnerabilities, working alongside other GC3 functions and engaging with national security processes (e.g., COBR) as required.
- Leading cross-government impact assessments to understand and manage risks to Government arising from security vulnerabilities.
- Coordinating communications to Government on critical or cross-cutting security vulnerabilities.
- Leading GC3 enablement of cross-government vulnerability management communities.
- Leading engagement with key public sector stakeholders and wider cyber security communities on behalf of GC3 Vulnerability Response, proactively identifying opportunities to improve vulnerability coordination response.
- Maintaining an ongoing understanding of the security vulnerability landscape (including trends and emerging or novel techniques) and the mitigation options available to government departments, and working alongside GC3 Threat Intelligence to communicate this.
- Acting as an escalation point for, and providing coaching and mentoring to, junior staff members.
- Being responsible for the leadership and line management of junior staff members.
Proud member of the Disability Confident employer scheme