Vulnerability Management Team Specialist at Three UK

Newbury, England, United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

06 Sep, 26

Salary

0.0

Posted On

08 Jun, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Vulnerability Management, Penetration Testing, Cyber Security, Windows, Linux, Networking Concepts, Incident Response, Cloud Security, Risk Assessment, KPI Tracking, Stakeholder Management, Security Hardening, Automation, Secure-by-Design, Remediation, Reporting

Industry

Telecommunications

Description

Company Description Location: Newbury + *Hybrid Working Working hours: Full time 37.5 hours per week – Monday to Friday *Hybrid We believe that through collaboration and connection with our colleagues we can achieve great things. Our hybrid working approach allows our people to work both in the office and at home, providing the flexibility and resources you need to succeed in your role. We don't require you to be in on specific days; instead, we ask people to come into the office 2-3 days each week, for at least 8 days per month. You should work with your line manager to understand what their expectations are for you, your specific role and your team. Who We Are We’re here to build a network the UK can count on – one that connects people, places and potential. Because no matter where you live, what your background is, or how you get online – we think everyone deserves the same chance to stay connected, and with VodafoneThree, that future’s being built – today. We’re creating more than the UK’s best network. We’re helping close the digital divide, empower communities and drive meaningful progress. We believe that everyone should feel they belong. Whoever you are and whatever your story, there’s space for you here. We’re building a workplace where different perspectives are welcomed, voices are heard, and everyone feels safe to show up as themselves. You’ll join a team that genuinely cares – about each other, about our customers, and about the future we’re building. From day one, you’ll be welcomed, valued and encouraged to bring your whole self to work. Why VodafoneThree Join us and you’ll be at the heart of change. That means building responsibly, investing sustainably and creating opportunities that last. We’re not just expanding connectivity; we’re reimagining what a connected nation looks like. With £11bn invested in 5G and digital infrastructure, your work will directly power businesses, services, and communities across the country. You’ll work on real challenges, with real impact, across every corner of the country. Wherever you join us, whatever your role, you’ll be helping to build a future that works better for everyone. We move at pace, because what we’re building matters – and we’re learning as we go. We’re proud of the progress we’ve made, but we’re just getting started. Job Description Join our IT teams, which is at the core of our digital future, analysing and operating all our internal and customer-facing systems, with the aim of delivering the best customer experience. None of it would be possible without our innovative teams, creating a connected future with technologies like Cloud, AI and big data. What you’ll do You’ll help strengthen how we protect our customers and our business by reducing cyber risk across our entire estate. You’ll take the lead on vulnerability management - working closely with teams across the organisation to identify, prioritise and fix security vulnerabilities using industry best practice. You’ll build strong relationships with technical and non-technical stakeholders to understand their environments and support effective, practical solutions. As a subject matter expert, you’ll stay up to date with emerging threats and vulnerabilities, helping us stay one step ahead. You’ll also play a key role in shaping how we approach security - especially in cloud environments - by promoting secure-by-design principles, automation and the use of modern, cloud-native tools. Day-to-day, you will: Manage vulnerability activities end-to-end, including scanning, tracking and reporting Identify and drive best practice approaches to remediation and risk reduction Lead the rollout of security hardening and vulnerability mitigation initiatives Partner with Risk teams to assess, prioritise and address security risks Review incidents, audits and findings to identify control gaps and improvement opportunities Create and track meaningful KPIs and KRIs, using data to tell a clear story on our security posture Use internal and external insights to inform senior stakeholders and support decision-making Contribute to building tools and automation (including scheduling and coordination improvements) Support and develop others in the team through coaching and knowledge sharing Lead vulnerability management activity related to the Telecommunications Security Act Represent the function in audits, including customer-facing discussions Communicate clearly and confidently, adapting your message for different audiences Foster collaboration across global teams to achieve shared goals Act as a champion for cyber remediation across VodafoneThree Advocate for and embed secure-by-design ways of working Together, we can build a more secure and resilient future. Qualifications Who you are Cyber security related industry accreditations such as ITIL, GIAC, CREST, CISM, CISSP or equivalent University degree Vulnerability Management & Penetration Testing experience Windows or Linux experience Solid understanding of networking concepts Incident Response experience Worried that you don’t meet all the desired criteria exactly? We know that everyone is unique, with multiple aspects to their identity and different experiences behind them. We are passionate about Inclusion for All and creating a workplace where everyone can thrive, whatever their personal or professional background. If you’re excited about this role but your experience doesn’t align exactly with every part of the job description, we encourage you to apply as you may be the right candidate for this role or another role, and our recruitment team can help you see how your skills fit in. Additional Information What we offer We care about our people’s success by offering great pay, bonuses, up to 28 days off plus bank holidays, and paid time for charity work. You can personalise our benefits for you and your family, like discounts, vouchers, a pension plan and loads more. We help with your career through our amazing learning & development tools. Need to know We are regulated by the Financial Conduct Authority and all offers of employment for this role are subject to background checks, including criminal (DBS) and financial checks to meet the regulators standards. We believe everyone should have the opportunity to interview for a role that matches their skills. In collaboration with our Talent, Diversity & Inclusion teams and our employee-led DEI Networks, we identified a range of reasonable adjustments to help you feel comfortable and perform at your best self during the interview process. If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, a sign language interpreter, or assistive technology, please contact your recruiter directly or email [email protected] for guidance. We use AI in different parts of our business to boost innovation, improve efficiency, and create new opportunities. We know many candidates use AI to fine-tune their CVs or prepare for interviews, but what we really care about is your unique experiences and achievements. During the interview, we want you to rely on your own knowledge and skills to show us who you really are—your personality, creativity, and abilities. Above all, we’re looking for authenticity and can’t wait to get to know the real you. #VodafoneThree V3 Requisition Grade: 9

Responsibilities

Lead end-to-end vulnerability management activities, including scanning, tracking, and reporting to reduce cyber risk across the estate. Collaborate with stakeholders to drive remediation efforts and implement secure-by-design principles, particularly in cloud environments.