Cyber Remediation Lead

Job Title: Cyber Remediation Lead

Location: Hybrid London UK

Type: Permanent, Full-Time 37.5 hours per week

The lead is responsible for establishing a complete asset inventory for the region by November 13, including every asset owned by the region’s delivery and BPS operations, with a named owner and business service attached to each. They should build a regional remediation plan that sequences internet-facing exposure first, then the long-tail defects, and submit it to Internal Audit through the Cyber team by October 23. They must run the weekly regional stand-up, maintain the regional defect and inventory tracker, and make sure every open finding has a named owner. They should prepare evidence packs for each IA action and coordinate with the Cyber team to file them. Each week, they will submit a RAGB update to the CTO. At least two weeks before each milestone, they will identify any date at risk and bring a recommendation to the GM and CTO; the CTO will elevate material decisions to the President’s weekly staff meeting.

The right candidate has delivery leadership experience in managed services or operations, ideally in a role that managed change across several accounts or teams. They should understand vulnerability management concepts such as CVSS severity, asset inventory, patch cycles and compensating controls, and should be comfortable working with security specialists without needing to become one. Experience running a remediation or audit-action program is strongly preferred. The role requires clear written communication, since much of the job is reporting to executives and to Internal Audit, and the ability to make tradeoffs between cost, risk and schedule.

The lead will be measured weekly on the percentage of region assets inventoried against the November 13 target, the number of open internet-facing Critical and High defects against the January 31 target, and the number of open defects older than ten years against the March 31 target. Success also means that every IA action for the region is either closed and verified or carries an approved RAL with a named end date, by the November 15 and November 30 checkpoints. Completed actions are reported as Blue in RAGB once closure evidence is complete.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.