Higher Vulnerability Manager - Police and Public Protection Technology Portfolio (PPPT)

Job description

About the job

Job summary

The Police and Public Protection Technology (PPPT) Portfolio delivers high-profile national programmes, bringing together civil servants, consultants and contractors to design and deliver digital services that support Home Office missions within Digital and Innovation.

The Vulnerability Management team is responsible for triaging vulnerabilities according to their relevance and criticality, identifying mitigations, and advising on their implementation. As a Higher Vulnerability Manager, you will join a team of cyber security professionals dedicated to reducing exposure to cyber threats across new and existing digital systems, supported by a collaborative culture and commitment to professional development.

Where business needs allow, some roles may be suitable for a combination of office and home-based working. Where this is the case, employees will be expected to spend a minimum of 60% of their working time in the office. Applicants can raise any queries to the email address at the bottom of the advert.

Watch this short video to hear from members of Home Office Digital talking about the projects they work on and their experience of working here: Working for Home Office Digital.

Job description

As a Higher Vulnerability Manager you will be responsible for identifying, assessing and managing vulnerabilities across infrastructure, applications, cloud environments and network services. This includes conducting vulnerability assessments using approved security tools, onboarding and maintaining assets within vulnerability management platforms, and monitoring the organisation's vulnerability landscape.

You will analyse vulnerabilities, assess severity, exploitability and business impact, and provide risk-based remediation recommendations. Working with technical teams, system owners, suppliers and senior stakeholders, you will coordinate remediation activities, monitor service levels and ensure risks remain within organisational tolerance.

You will maintain documentation, risk assessments and remediation records, produce dashboards, metrics and reports, and support governance, compliance and audits. The role also provides advice on patching, system hardening and secure configuration, ensuring alignment with Threat and Vulnerability Management policies and contributing to improved cyber resilience and security posture.

Person specification

As a Higher Vulnerability Manager, your main responsibilities will be;

• Vulnerability Identification - Utilise various vulnerability management tools and technologies effectively to identify, assess and report on vulnerabilities.
• Vulnerability Assessment - Analyse the results of vulnerability scans to determine the severity and potential impact of identified vulnerabilities, categorising them based on risk to the organisations assets and operations.
• Remediation Support - Collaborate with multiple departments, technical teams and senior stakeholders to recommend remediation plans and complex configuration changes in support of vulnerability remediation.
• Reporting - Maintain through documentation of vulnerability assessments, findings and remediation efforts to support compliance and reporting requirements. Support the creation of reports for stakeholders, management and technical teams.
• Incident Management - Work closely with other security teams and technical resolver groups to ensure comprehensive approach to managing prioritised vulnerabilities.
• Tool management - Supporting different technical approaches and utilising various tooling and technologies to perform vulnerability assessments against large and complex infrastructure.
• Vulnerability Management Service - Support the onboarding of assets into the appropriate vulnerability management tooling in line with the Threat and Vulnerability Management Service. Ensure that vulnerability management activities align with service polices, standards and procedures.

Working Pattern

Due to the business requirements of this role, it is only available on a full-time basis. However, compressed hours are available.

Essential Skills

• Working in an information security, cyber security or information assurance discipline or in the delivery of technology-based projects.
• Involvement in applying techniques to improve operational processes.
• Communicating in a verbal and written manner, and a good understanding of the use of different channels and formats for different audiences.
• Building partnerships with peers across an organisation, 3rd party suppliers, and other teams.

• Risk and controls frameworks: NIST, ISO27001, COBIT, Cyber Essentials/ Defence Controls, NCSC guidelines and/or threat analysis models and frameworks: STiX, Cyber Kill Chain, Diamond Model etc.
• Vulnerability research, malware analysis and exploit investigation, especially within Home Office, Cabinet Office, NCSC

SFIA capability framework

Skills for the Information Age (SFIA) version 8 is the technical framework that sets the standard capability and development of all levels in the Home Office. This is a link to the capability framework: All skills A - Z English (sfia-online.org).

We use set SFIA technical skills to form our interview questions and we will assess you against these technical skills during the selection process.

The essential skills listed above are reflective of the Home Office Government Digital and Data Profession Career Framework (based on the industry standard SFIA framework). Use the SFIA Levels of responsibility to understand what would be expected for each technical skills listed below.

Strategy and Architecture

• Security and Privacy
  • Threat Intelligence (THIN) - Level 2
• Governance, risk and compliance
  • Risk management (BURM) - Level 3

Delivery and Operation

• Service Management
  • Incident Management (USUP) - Level 2
  • Security Operations (SCAD) - Level 2
• Security services
  • Vulnerability Assessment (VUAS) - Level 2

Relationships and engagement

• Stakeholder management
• Stakeholder relationship management (RLMT) - Level 3 Generic Level 3 descriptor)

Qualifications

Certification in relevant cyber security qualifications such as CISMP, CTIA, CRISC etc. or equivalent are desirable but not essential for this role and should not prevent application.

Behaviours

We'll assess you against these behaviours during the selection process:

• Leadership
• Communicating and Influencing
• Developing Self and Others

Technical skills

We'll assess you against these technical skills during the selection process:

• Threat Intelligence (THIN) - Level 2
• Risk management (BURM) - Level 3
• Incident Management (USUP) - Level 2
• Security Operations (SCAD) - Level 2
• Vulnerability Assessment (VUAS) - Level 2
• Stakeholder relationship management (RLMT) - Level 3 (Generic Level 3 descriptor)

Benefits

Alongside your salary of £45,750, Home Office contributes £13,253 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

Why work for us...

Find out more information at: Benefits - Home Office Careers, but some of the primary ones are:

• A Civil Service Pension with employer contribution rates of at least 28.97%.
• In-year reward scheme for one-off or sustained exceptional personal or team achievements.
• 25 days annual leave on appointment, rising with service.
• 8 days of public holidays, plus 1 additional privilege day.
• Where business needs allow, some roles may be suitable for a combination of office and home-based working. This is a non-contractual arrangement where all employees will be expected to spend a minimum of 60% of their working time in an office.

Sign-up on our website to receive emails with information about careers at the Home Office.

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.

As part of the application process, you will be asked to complete a CV and 1000-word personal statement:

1. CV - include a brief employment history outlining for each role, the organisation, job title, dates in post, and key responsibilities and achievements. Any recent employment gaps should be explained. A second section should set out the skills and experience most relevant to this role, drawing on your career, training, and other relevant activities without repeating the employment history. Focus on the evidence that best demonstrates your capability to meet the role requirements.
2. Personal statement - this should present a clear and coherent narrative explaining why you are applying, what you would bring to the role, and how your experience meets the essential criteria. Use well‑chosen examples to illustrate your impact, drawing on STAR‑style thinking where helpful, but ensure the statement reads as a single, flowing document rather than a set of isolated responses.

To ensure you are assessed on merit alone, we ask you to anonymise your application. This means removing personal identifiers such as your name, age, and place of education. You do not need to remove your employment history, job titles, or any information about your work.

Watch our three short videos on how to apply for our roles: Applying - Home Office Careers.

Problems during the application process

If you experience problems accessing this advert, or you think you've made a mistake on an initial application, please contact [email protected], including the vacancy reference, at least two working days before the vacancy closes. Further information can be found on our website.

Do not create or attempt to submit another application, online test or use a different Civil Service Jobs account to proceed as this would be in violation of the candidate declaration.

Sift Stage

The sift will be held on the CV and Personal Statement. Please read the essential skills for this position carefully. We will only consider those who meet the listed requirements.

In the event of a high number of applications received, an initial sift may be held on the Personal Statement.

Interview Stage

Candidates reaching the required standard will then be invited to attend an interview. The interview will assess your Technical Skills (SFIA Framework) and Behaviours using technical and behaviour-based questions.

If you are invited to an interview, you will be required to bring a range of documentation for the purposes of establishing identity and to aid any pre-employment checks. Please see the attached list of Home Office acceptable ID documents.

Sift and Interview dates

The sift will commence from 23/11/2026.

Interviews are expected to take place from 07/12/2026. (Subject to the Panel's operational requirements/priorities).

Interviews will be conducted remotely via MS Teams.

We will try to meet the dates set out in the advert. There may be occasions when these dates will change. You will be provided with sufficient notice of the confirmed dates.

Further information

If you have previously made an unsuccessful application for a role with the same essential skills and are not able to demonstrate how you have developed these skills since your last application, please reconsider applying as your application is unlikely to be successful.

In order to process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service on your behalf.

However, we recognise in exceptional circumstances some candidates will want to send their completed forms directly. If you are doing this, please advise Government Recruitment Service of your intention by emailing [email protected] stating the job reference number in the subject heading.

Reserve List

A reserve list of successful candidates will be kept for 12 months. Should another role become available within that period you may be offered this position.

Reserve lists may be held for each location. Candidates will be appointed in merit order by location where this applies.

Similar Roles

Job offers to this post are made based on merit. We often have similar roles available at different grades. If a candidate is suitable for a similar role or a lower grade than they have applied for, we may offer the candidate that role without the need to go through a further selection process providing the role has the same competencies and essential skills.

UK residency and security requirements

For meaningful security checks to be carried out, individuals need to have lived in the UK for a sufficient period of time. Learn more on our website. Security Checks - Home Office Careers.

Please note that this role requires Security Check (SC) clearance, which would normally need 5 years' UK residency in the past 5 years.

However, in exceptional circumstances security clearance applications for candidates who have been present in the UK for at least 3 of the last 5 years may be considered. Failure to meet this residency requirement will result in your security clearance application being rejected.

This role requires Non-Police Personnel Vetting Level 3 (NPPV3) clearance. You should currently hold or be willing to obtain NPPV3 vetting, including financial checks. This is essential for the role. For further information visit About the Police National Vetting Service , Warwickshire Police.

Formal offers of employment will not be made until successful candidates have obtained both SC clearance and NPPV3 clearance.

Please note that failure to obtain NPPV3 clearance may trigger a formal review of your SC clearance. Depending on the nature of the information identified, this could result in your SC clearance being revoked.

For further information on National Security Vetting please visit the following page Demystifying Vetting - GOV.UK.

Visa Sponsorship

We are unable to sponsor any individuals via Skilled Worker Sponsorship / Tier 2 (General) work visas as we do not hold a UK Visa & Immigration (UKVI) Skilled Worker License.

Capability allowance

The advertised role is eligible for a Digital Capability Allowance. Successful candidates with exceptional skills and experience may apply for a Recruitment and Retention Allowance. Please see the Home Office Digital Recruitment and Retention Allowance Careers page for more information.

The allowance values are set by the Home Office, subject to remaining in a qualifying role. This allowance is non-contractual, subject to an annual review and could be withdrawn at any time.

For both new entrants and existing civil servants, the total compensation offer is a combination of base salary and, if applicable, a capability-based allowance. The pay ranges for this role are London: £45,750 - £48,250. New entrants to the Civil Service will start on the pay range minimum. For existing civil servants, our policies on level transfer and promotion will apply.

Reasonable Adjustments

If a person with disabilities is at a substantial disadvantage compared to a non-disabled person, we have a duty to make reasonable changes to our processes.

If you need a change to be made so that you can make your application, you should:

• Contact Government Recruitment Service via [email protected] as soon as possible before the closing date to discuss your needs.

• Complete the "Assistance Required" section in the "Additional Requirements" page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you are deaf, a language service professional.

If you are experiencing accessibility problems with any attachments on this advert, please contact the email address in the 'Contact point for applicants' section.

Feedback

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a basic (or equivalent) criminal record check.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).

See our vetting charter (opens in a new window).

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

Diversity and Inclusion

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see theCivil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).

Apply and further information

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.

Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job contact :

• Name : AC Recruitment
• Email : [email protected]

Recruitment team

• Email : [email protected]

Further information

If you feel that your application has not been treated in accordance with the Civil Service Recruitment Principles. and you wish to make a complaint, then contact the Government Recruitment Service via [email protected]. If you are not satisfied with the response that you receive, then you can contact the Civil Service Commission.