Security Vulnerability Manager

JOB TITLE: Security Vulnerability Manager

LOCATION(S): Leeds, Bristol or Edinburgh

HOURS: Full-time

WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week currently, or 40% of our time, at one of our office locations.

About this opportunity

The Chief Security Office (CSO) plays a vital role in delivering Lloyds Banking Group's vision of putting customers at the heart of everything we do, helping Britain prosper, and protecting the Group and its customers and suppliers from security threats.

We are in search of a Security Vulnerability Manager with engineering skills to join our Security Vulnerability Services team. You will be directly influencing how the Group anticipates and responds to emerging cyber threats and vulnerabilities. You will help shape the Groups security posture by assessing security vulnerabilities in network protocols and analysing malware-related threat intelligence to establish the potential risk to the Group. The insights you provide will help safeguard critical systems, inform executive decision-making, and strengthen organisational resilience.

What You’ll Do

• Monitor, analyse, and triage threat and vulnerability intelligence.

• Collaborate with multi-functional teams to help design and implement security solutions.

• Assess and triage vulnerabilities found during testing and scanning of Group systems as part of structured vulnerability management processes.

• Provide technical guidance during a security incident response process.

• Recommend appropriate and effective mitigations for security issues

• Deliver training and guidance to colleagues on good security practices.

• Produce analytical insights from vulnerability and threat data to inform decision making and strengthen organisational resilience.

Why Lloyds Banking Group

We’re on an exciting journey to transform our Group and the way we’re shaping finance for good. We’re focusing on the future, investing in our technologies, workplaces, and colleagues to make our Group a great place for everyone. Including you.

What you’ll need

• Passion for cybersecurity and new technologies

• Solid understanding of how vulnerabilities are detected, triaged, and reported as part of a structured vulnerability management process

• Proficient in industry-standard frameworks such as MITRE ATT&CK and NIST

• Solid grasp of network protocols, cloud environments e.g Google Cloud Platform, Microsoft Azure, and operating systems (Windows and UNIX/Linux)

• Knowledgeable in security controls (e.g., Endpoint Detection and Response, Web Application Firewalls) and common attack techniques

• Experienced in incident response and data-driven security investigations

• Effective communicator with excellent customer engagement and analytical problem-solving abilities

• Solid understanding of statistics and data analysis methods, with the ability to interpret complex datasets and extract actionable insights.

Any experience of these would be really useful

• A cybersecurity certification such as CISM, CISSP, or an equivalent qualification

• Technical experience with SCM, GitOps, and CI/CD pipelines.

• Technical knowledge across diverse technologies e.g., z/OS, storage, SQL databases, SIEMs

• Experience with scripting languages (e.g. Python).

• Informed on current malware trends and the broader external threat landscape.

• Knowledge and understanding of risk assessment concepts and methodologies

• Good understanding of the operational processes, tools and procedures, within a large-scale IT environment.

About working for us

Our ambition is to be the leading UK business for diversity, equity and inclusion supporting our customers, colleagues and communities and we’re committed to creating an environment in which everyone can thrive, learn and develop.

We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and a dedicated Working with Cancer Initiative.

We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location and working patterns. And, as a Disability Confident Leader, we guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role with a disability, long-term health or neurodivergent condition through the Disability Confident Scheme.

We provide reasonable adjustments throughout the recruitment process to reduce or remove barriers. Just let us know what you need.

We also offer a wide-ranging benefits package, which includes

• A generous pension contribution of up to 15%

• An annual performance-related bonus

• Share schemes including free shares.

• Benefits you can adapt to your lifestyle, such as discounted shopping.

• 30 days’ holiday, with bank holidays on top

• A range of wellbeing initiatives and generous parental leave policies

Want to do amazing work, that’s interesting and makes a difference to millions of people? Join our journey.