Security Consultant

Job description
Role Summary
As a Consultant, Vulnerability & Exposure Management, you will be responsible for driving vulnerability remediation across assigned portfolios by analysing and prioritising findings, establishing remediation plans, engaging accountable technology teams, and tracking delivery through to closure.
The role focuses on reducing overdue vulnerabilities, security exposures, and non-compliances across infrastructure, cloud, applications, containers, and end-user environments. You will provide practical remediation guidance, accurate reporting, and timely escalation of delivery barriers.
You will work closely with Vulnerability & Exposure Management (V&EM) teams, technology stakeholders, asset and application owners, infrastructure and cloud security teams, and risk and compliance functions to ensure vulnerabilities are appropriately managed and remediated in line with approved risk criteria and governance requirements.
You will also contribute to AI, automation, and process improvements that reduce manual effort and improve V&EM productivity.
This is a G3 role within Group Security, reporting to the Manager, Vulnerability & Exposure Management. The role requires the ability to independently manage assigned portfolios, exercise sound technical judgement, maintain effective stakeholder relationships, and deliver outcomes with limited supervision.
Key Activities
Vulnerability & Exposure Management
Support delivery of the V&EM strategy and assigned goals and KPIs.
Own assigned portfolios and drive findings through triage, assignment, remediation, and closure.
Prioritise vulnerability findings based on severity, exploitability, exposure, asset criticality, and business impact.
Analyse vulnerability data and determine appropriate remediation priorities using approved risk criteria.
Identify and investigate unassigned vulnerabilities, ownership defects, duplicates, asset mismatches, and status inconsistencies.
Support remediation campaigns targeting Critical, High, overdue, externally exposed, and systemic vulnerability populations.
Identify recurring vulnerability findings and systemic root causes to support sustainable corrective actions.
Ensure applications scheduled for decommissioning or replacement continue to be remediated or appropriately governed until the associated exposure is removed.
Stay abreast of emerging vulnerabilities, security exposures, and remediation practices.
Remediation Coordination & Delivery
Establish and agree remediation actions, accountable owners, milestones, and target dates with relevant technology teams.
Track remediation progress, follow up on missed commitments, and escalate material delivery barriers.
Recommend practical remediation options to accountable technology teams based on technical findings and risk context.
Support consultation requests and provide remediation guidance to relevant stakeholders.
Review remediation evidence, false-positive requests, deferrals, and exceptions against established requirements.
Determine when vulnerability ownership, supporting evidence, or remediation status requires correction or escalation.
Escalate unresolved blockers and material risks to the Manager, Vulnerability & Exposure Management.
Support urgent vulnerability and cybersecurity response activities when required.
Governance, Risk & Compliance
Maintain accurate vulnerability records, remediation plans, and governance evidence in approved systems of record.
Ensure assigned vulnerability management activities comply with relevant policies, risk, control, and compliance requirements.
Support appropriate governance of vulnerabilities that cannot be remediated within required timeframes.
Engage relevant stakeholders to clarify risk ownership, remediation responsibilities, and outstanding actions.
Participate in governance forums and provide practical input on vulnerability remediation and exposure management.
Support completion of assigned controls, audit actions, and treatment-plan activities within required timeframes.
Reporting, Data Quality & Performance Management
Produce timely operational and management reporting for assigned portfolios.
Monitor remediation progress, overdue vulnerabilities, outstanding commitments, and portfolio performance against agreed targets.
Maintain accurate vulnerability ownership, remediation actions, target dates, and progress updates.
Identify and correct data-quality issues affecting vulnerability records, remediation reporting, and governance information.
Ensure reporting and governance updates are delivered within agreed deadlines.
Support tracking and reporting of relevant V&EM goals and KPIs.
AI, Automation & Process Improvement
Identify vulnerability management activities suitable for automation or process improvement.
Contribute to approved AI, automation, and workflow improvements across vulnerability assignment, triage, communications, data quality, and reporting.
Support improvements that reduce manual effort and improve vulnerability management productivity.
Ensure automated outputs are appropriately validated and exceptions are handled.
Contribute technical knowledge, process improvements, and coaching within the V&EM team.
Support measurement of time savings, cycle-time reductions, and quality improvements resulting from agreed initiatives.
Stakeholder Collaboration & Communication
Work closely with the Manager and Head of Vulnerability & Exposure Management, V&EM teams, CIO and Enterprise Technology teams, and relevant technology stakeholders.
Coordinate with asset, service, and application owners to establish remediation ownership and drive timely resolution.
Engage Cloud Security, Application Security, Infrastructure Security, and other relevant security teams on vulnerability remediation activities.
Collaborate with Risk, Controls, Audit, and Compliance teams on applicable governance and control requirements.
Work with data, automation, and platform teams to support improvements in vulnerability management processes.
Build effective stakeholder relationships, maintain remediation momentum, and escalate issues when intervention is required.
Required Skills
Strong delivery and execution skills, with the ability to independently manage assigned vulnerability management portfolios and drive remediation outcomes.
Experience in vulnerability management, cybersecurity, security operations, technology risk, or remediation governance.
Ability to analyse vulnerability findings, prioritise remediation activities, and translate findings into actionable remediation plans.
Experience analysing vulnerability data and driving remediation actions with technology stakeholders.
Strong stakeholder management skills, including the ability to engage accountable technology teams, coordinate remediation commitments, and manage delivery barriers.
Understanding of vulnerability analysis and remediation, including risk-based prioritisation, remediation tracking, and closure validation.
Good understanding of risk and compliance requirements relevant to vulnerability and exposure management.
Strong data analysis and reporting skills, with the ability to maintain accurate vulnerability records and produce operational and management reporting.
Ability to use sound technical judgement, supporting evidence, and risk context to recommend practical remediation actions.
Ability to identify ownership issues, data inconsistencies, remediation blockers, and circumstances requiring escalation.
Strong problem-solving skills, ownership, and the ability to deliver outcomes with limited supervision.
Ability to build effective stakeholder relationships, maintain delivery momentum, and communicate remediation requirements clearly.
Ability to contribute technical knowledge, process improvements, and coaching within the team.
Tertiary qualification in Cyber Security, Information Technology, Computer Science, or a related discipline.
Nice-to-have Requirements
Familiarity with infrastructure, cloud, and application security concepts and their relevance to vulnerability and exposure management.
Understanding of exposure management practices across infrastructure, cloud, applications, containers, and end-user environments.
Experience with ServiceNow Vulnerability Response workflows or similar vulnerability management platforms.
Familiarity with AI, automation, or scripting capabilities that can support vulnerability management activities.
Experience identifying opportunities to automate vulnerability assignments, triage, communications, data-quality checks, and reporting.
Experience supporting process improvements that reduce manual effort, shorten remediation cycle times, or improve reporting quality.
Relevant cybersecurity, vulnerability management, information security, or technology risk certifications are desirable.
Key Performance Indicators
At least 90% of assigned Critical/High vulnerabilities are remediated or appropriately governed within SLA.
100% of overdue backlog items have current owners, remediation actions, target dates, and progress updates.
Assigned overdue backlog reduces in line with agreed portfolio targets.
100% of missed commitments and blockers are escalated through the agreed governance process.
Reporting and governance updates are delivered by agreed deadlines with no material data-quality errors.
Consultations, false-positive reviews, and remediation actions are completed within agreed service expectations.
Agreed AI, automation, or process improvements demonstrate recorded time savings, cycle-time reduction, or quality improvement.
Assigned controls, audit actions, and treatment-plan activities are completed within required timeframes.
(Note: Due to the high volume of applications we receive, we are unable to respond to every candidate individually. If you have not received a response from GFT regarding your application within 10 workdays, please consider that we have decided to proceed with other candidates. We truly appreciate your interest in GFT and thank you for your understanding)