Cyber Security Vulnerability Manager: Sponsorship Available

Digital Health and Care Wales

Job summary

Are you passionate about cyber security and protecting critical digital services that make a real difference to people’s lives? We are looking for a Cyber Vulnerability Manager to lead and develop our vulnerability management function, helping to identify, assess and reduce cyber risks across NHS Wales.

In this highly influential role, you will oversee vulnerability scanning, assessment and remediation activities, ensuring systems and applications remain secure against existing and emerging threats. Working with a wide range of stakeholders, you will provide expert advice, develop improvement initiatives and support the delivery of a strong cyber security culture across the organisation.

As a leader within the Cyber Security team, you will manage and support specialist staff, helping them to develop their skills while creating an inclusive and collaborative environment where everyone can thrive. You will also contribute to strategic cyber security planning, helping shape future security capabilities and continuously improving services for our users.

This is an exciting opportunity for someone with strong technical expertise, excellent leadership skills and a passion for continuous improvement. If you enjoy solving complex challenges, influencing positive change and working in a role where your expertise directly supports vital public services, we would love to hear from you.

Main duties of the job

As Cyber Vulnerability Manager, you will lead the delivery of vulnerability management services across a complex digital environment. You will coordinate vulnerability assessments, analyse security findings and work closely with technical teams, suppliers and service owners to ensure risks are effectively managed and remediated.

You will oversee vulnerability scanning tools, penetration testing activities and associated contracts, ensuring services remain effective, compliant and aligned with organisational objectives. Using data and intelligence from multiple sources, you will assess risk, identify trends and produce reports that support informed decision-making at operational and strategic levels.

A key part of the role will involve developing policies, procedures and standards that strengthen cyber resilience and support continuous improvement. You will lead projects, manage priorities and contribute to cyber security improvement programmes, ensuring outcomes are delivered on time and to a high standard.

The post holder will also build strong relationships across the organisation and wider NHS, providing expert guidance, delivering training and awareness activities, and helping teams understand and manage cyber security risks in a practical and collaborative way.

Person Specification

Qualifications

Essential

  • Educated to degree (or equivalent qualification / experience) in an associated professional field.
  • Educated to degree (or equivalent qualification / experience) in an associated professional field.

Desirable

  • Professional Registration with a relevant informatics professional body.
  • FEDIP Practitioner, or equivalent recognised Intermediate level Professional qualification.

Experience

Essential

  • Experience of leading a team and successfully identifying and managing the risks posed by vulnerabilities in the IT systems and applications within a large complex organisation.
  • Experience of conducting penetration tests and vulnerability scans in a corporate environment.
  • Proven ability to develop training materials to effectively accommodate participants with differing learning styles.
  • Familiar with the IT environment relating to own sphere of work (own organisation and/or closely associated organisations, such as customers, suppliers, partners), in particular own organisation’s technical platforms and those that interface to them through the specialism, including those in closely related organisations.

Skills and Attributes

Essential

  • Technical Adaptability skills to learn and assess new methodologies or technologies quickly, understanding their wider implications and where appropriate implement them.
  • Analytical skills to acquire a proper understanding of a problem or situation by breaking it down systematically into its component parts and identifying the relationships between these parts. Selecting the appropriate method/tool to resolve the problem and reflecting critically on the result, so that what is learnt is identified and assimilated.

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Certificate of Sponsorship

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).

From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).

Closing Date: 24 August 2026

To apply for this job please visit apps.trac.jobs.