Vulnerability & Patch Management Engineer

Shawbrook provides finance to a wide range of customer segments that value the premium experience, flexibility and certainly we deliver.  We are a purpose-led organisation, with a focus on delivering long-term sustainable value for all our stakeholders.

We have a diversified offering, with our innovative lending propositions tailored to meet specific customer needs in carefully selected markets across SME, Real Estate and Personal. Our products range from complex structured credit facilities for growth-focused businesses to mortgages for professional landlords and property investors, as well as simple loans for consumers delivered digitally.  We fuel our lending through customer deposits, which we attract by delivering a premium experience, choice and consistently great value to smart savers.

The business model we have created is unique and difficult to replicate, with our ‘best of both’ approach combining deep human expertise with advanced digital, tech and data capabilities.  This combination not only allows us to deliver excellent customer experiences, but to do so efficiently and at scale.  We are proud of our innovative and agile culture, which drives consistently high employee engagement scores and makes Shawbrook an attractive destination for the best talent. If you’re willing to roll up your sleeves, contribute new ideas and believe anything is possible, you’re our kind of person.

Work with us because you:

• Want to be part of a bank built for the dynamics of the modern world
• Relish a challenge and enjoy a fast-paced, innovative and hardworking culture
• Enjoy finding new and better ways to solve complexity and make things happen
• Want to belong to a diverse culture that stands shoulder to shoulder with minority and underrepresented groups
• Care about society and the environment and want to be part of a business that cares too
• Want to continue to grow professionally and be the best version of yourself

Key Responsibilities

• Own the vulnerability management lifecycle across the estate from scanning and detection through to remediation and closure.
• Coordinate and oversee patch management schedules across servers both on prem and cloud, endpoints, network devices, and 3rd party applications, working closely with infrastructure, application, and security teams.
• Identify, Triage and prioritise vulnerabilities based on severity, exploitability, and business risk (e.g. CVSS scoring, threat intelligence).
• Track remediation SLAs and escalate overdue or high risk vulnerabilities to relevant stakeholders and senior management.
• Maintain and report on vulnerability and patching KPIs/metrics, providing regular reporting to Service Delivery and Corporate Technology Leadership.
• Liaise with third party vendors and internal teams to ensure timely patch availability and application.
• Support audit and compliance requirements (e.g. ISO 27001, Cyber Essentials, PCI-DSS) by maintaining accurate vulnerability and patching records.
• Continuously improve vulnerability management processes, tooling, and automation to increase remediation speed and coverage.
• Act as the escalation point for critical/zero-day vulnerabilities requiring emergency patching.

Key Skills & Experience

• Proven experience in vulnerability management, patch management, or IT security operations.
• Strong understanding of vulnerability scanning tools (Qualys, Rapid7) and patch management platforms (Ninja One, Ivanti, Intune).
• Familiarity with risk frameworks and scoring methodologies (CVSS, NIST, etc.).
• Experience working within ITIL aligned service delivery environments, particularly change and incident management.
• Strong stakeholder management skills  able to work across infrastructure, cloud, infosec, and application teams.
• Ability to produce clear reporting and communicate risk to both technical and non-technical audiences.
• Relevant certifications advantageous (e.g. CompTIA Security+, CISSP, ITIL Foundation).

Key Relationships

• Service Delivery Management
• Information Security / CISO function
• Infrastructure & Application teams
• Change & Release Management
• Third-party vendors/suppliers

Your Wellbeing - We take your health and well-being very seriously by providing a range of benefits to give you and your family peace of mind. These include:

• Market leading family friendly policies such as access to our Maternity, Adoption and Paternity policies from Day 1 of your employment
• Free access to Headspace, a mindfulness & meditation digital health app
• Free access to Peppy digital health app that offers personalised support through fertility treatment becoming a parent or menopause
• EAP (Employee Assistance Programme) - Offering you support on a wide range of subjects including financial concerns, mental wellbeing and more general queries around family, work, housing, and health
• Cycle to work scheme
• Discounts on gym membership
• Contributory pension scheme & death in service

Your Lifestyle - It’s important you strike the right balance between your work and personal life. We provide benefits to support you when at work and when you’re enjoying your leisure time.

• Minimum of 27 days holiday per year
• Option to buy or sell holiday days through our flexi-holiday scheme
• Discounts on gym membership nationwide
• Access to discounts on a range of high street and online brands
• Community support and charitable giving

Your Contribution - We’re focused on rewarding those that go the extra mile in helping us achieve our goals.

• Participation in our annual discretionary bonus scheme designed to reward your contribution to our success
• Proudly Shawbrook recognition scheme focused on recognising our role models and thanking our colleagues for a job well done