Vulnerability Management SDLC Lead

Are you passionate about cyber security and eager to make a real impact?  At Virgin Money, we’re looking for a dynamic Vulnerability Management SDLC Specialist to join our busy team.

We’re establishing a new capability to work with our SDLC tooling, assessing the output and remediation activity, and collaborating with our DevOps function on integration and improvement initiatives, providing straight up advice for colleagues on security best practice and requirements.

It’s a great opportunity to work with industry-leading tools and security partners, to become a key security partner to our DevOps community to support the building of secure, high-quality applications for the Bank, while enhancing your analytical, technical and communication skills, and enabling you to really make a difference to our customers and colleagues.

What you’ll be doing

Assess the output from vulnerability scanning on our application code and open-source libraries, providing guidance to our DevOps function on best practice, and tracking remediation
Identify and evaluate security risks on our internal applications, making recommendations to continuously improve Virgin Money’s security posture in an ever-changing threat landscape.
Offer expert guidance and advice on code vulnerabilities, our policy & standards, industry regulations, frameworks, and best practices to support our DevOps function
Support our DevOps function with a security lens, developing and maintaining reporting to support identification of key focus areas for remediation and driving forward change
Build a focused Champions network for Code Security by fostering strong connections with our DevOps function, helping to shift our security culture and advocate for Secure Coding principles across our application code base.
Assist team growth, lead and provide mentorship to junior team members, fostering a collaborative and growth-oriented environment.
Work with our management team to develop and lead the SDLC function for Cyber Security