Senior Vulnerability Management Lead | S4 | CIO | Milton Keynes or Glasgow

We are seeking an experienced Vulnerability Management and Security Hardening Manager to lead our efforts in safeguarding the organisation's digital assets and infrastructure. In this role, you will be responsible for developing, implementing, and overseeing a robust vulnerability management program, ensuring risks are identified, assessed, prioritized, and remediated effectively. You will work closely with Security, IT, and Business stakeholders to strengthen our security posture and meet compliance requirements, while proactively identifying threats that could impact the organisation. We're shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas. To succeed in this role, you will be responsible for:

• Lead and manage the Vulnerability Management program across the enterprise.
• Develop processes for prioritisation, and remediation of vulnerabilities.
• Collaborate with IT operations, infrastructure, and application teams to implement remediation strategies.
• Monitor and report on vulnerability remediation trends, risks, and program performance to senior leadership.
• Ensure compliance with Santander UK and Group vulnerability remediation SLAs.
• Escalating unresolved or high-impacting vulnerabilities through the correct governance channels, ensuring stakeholder ownership from local and global teams.
WHAT YOU'LL BRING Our people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organisation. We're enabling teams to go beyond by valuing who they are and empowering what they bring. The following requirements represent the knowledge, skills, and abilities essential for success in this role. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.


• Extensive experience analytical and problem-solving abilities with the ability to prioritize effectively. (Required)
• Extensive experience in vulnerability management remediation and information security. (Required)
• Excellent communication and collaboration skills to work effectively with diverse teams and stakeholders, including senior leadership and non-technical audiences. (Required)
• Excellent understanding of IT infrastructure, cloud environments, and application security. (Required)
• Extensive experience in being able to communicate complex tech information in a simple and easily digestible way to non-technical teams. (Required)
• Excellent leadership and people management skills driving high performance teams. (Required)
• Knowledge in scripting and automation (e.g., Python, PowerShell) to enhance vulnerability management, remediation and analysis. (Preferred)
• A solid understanding of cyber risk and how cyber-attacks are conducted across endpoints, cloud and on-premises networks. (Preferred)
• Patch & Configuration Management: Knowledge of patch deployment processes and tools. (Preferred)
Education
• Degree in a relevant field (e.g., IT, Cybersecurity, Computer Science, or equivalent experience) (Preferred)
Languages
• Spanish (Preferred)
Hard Skills
• Extensive experience in vulnerability management remediation and information security (Required)
• Excellent understanding of IT infrastructure, cloud environments, and application security (Required)
• Knowledge in scripting and automation (e.g., Python, PowerShell) to enhance vulnerability management, remediation, and analysis (Preferred)
• Patch & Configuration Management: Knowledge of patch deployment processes and tools (Preferred)
• Solid understanding of cyber risk and how cyber-attacks are conducted across endpoints, cloud, and on-premises networks (Preferred)
• Experience developing, implementing, and overseeing vulnerability management programs. (Preferred)
• Experience monitoring and reporting on remediation trends, risks, and program performance. (Preferred)
Soft Skills
• Excellent communication and collaboration skills (working with diverse teams, senior leadership, and non-technical audiences) (Required)
• Analytical thinking and strong problem-solving abilities (prioritising and resolving complex issues) (Required)
• Leadership and people management skills (driving high-performance teams) (Required)
• Ability to communicate complex technical information in a simple, digestible way. (Required)
• Proactive approach to risk management and escalation (Required)
• Organisational skills (developing and overseeing processes, monitoring trends) (Required)
• Stakeholder management (engaging with IT, security, business, and global teams) (Required), All candidates must have the right to work in the UK to commence employment with Santander.
  
  Santander (www.santander.com) is evolving from a global, high-impact brand into a technology-driven organisation, and our people are at the heart of this journey. Together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what's possible.
This is more than a strategic shift. It's a chance for driven professionals to grow, learn, and make a real difference. Our mission is to contribute to help more people and businesses prosper. We embrace a strong risk culture and all our professionals at all levels are expected to take a proactive and responsible approach toward risk management. Santander Digital Services is the team of technology and operations at Santander. We are convinced of the importance of technology that is aligned with the requirements of the business and that out work not only brings value to users, people and communities but also fosters individual creativity. Our team of over 7,000 people in 8 countries (Spain, Portugal, Poland, UK, USA, Mexico, Chile and Brazil) develops and/or implements financial solutions across a broad spectrum of technologies (including Blockchain, Big Data and Angular among others) on all kinds of on-premise and cloud-based platforms., At Santander, we're proud to be an inclusive organisation that provides equal opportunities for everyone - regardless of age, gender, disability, civil status, race, religion or sexual orientation. We're committed to creating a recruitment experience that's accessible, fair and welcoming for all candidates. We want our people to thrive - at work and at home - while delivering the best outcomes for our customers and supporting each other to grow. To make this possible, our roles are site-based with a hybrid working pattern, where colleagues are expected to attend the office at least 12 days per month (pro-rata for part-time roles).

At Santander, your contribution matters. We recognise the difference you make every day, and we make sure you feel valued, supported and rewarded in return. Here, recognition goes beyond pay. It's about the pride you feel in your work, the impact you have on customers and communities, and the opportunities you have to grow and thrive - personally and professionally. Salary Range:
• £80,000.00 - £120,000.00 per annum (depending on experience)
• This salary range represents the expected remuneration for the role. Annual salary is based on a standard 35-hour working week. Actual salary offered will depend on skills, experience, qualifications and location.
• 30 days' holiday plus bank holidays, which increases to 31 days after 5yrs service, with the option to purchase up to 5 contractual days per year.
• £6,000 car allowance per year.
• Company funded individual private medical insurance.
• Protection for you and your family, with company-funded death-in-service benefit and income protection insurance, and the option to take advantage of discounted rates for additional life assurance and critical illness cover.
• Share in Santander's success by saving or investing in our share plans.
• As a Santander UK employee, you are able to request staff versions of our products like our Edge Current Accounts and Credit Cards with no fees, as well as apply to many other deals and discounts in Santander products and services
• Competitive rewards that reflect the real impact you make and the value you bring.
• Wellbeing that goes beyond work - we work with a range of wellbeing partners across our 4 pillars of wellbeing (physical, mental, social and financial) to give you access to a suite of apps, discounted gym and fitness access, weekly online classes, flexible healthcare and mental health support.
• Support for every life stage - from menopause and pregnancy to parenthood and beyond, with enhanced family leave, childcare options and tailored wellbeing support.
• Time to give back through volunteering opportunities that let you make a difference in the communities we serve.
• Global growth opportunities to shape your career, learn new skills and explore what's possible across our international network.