Information Security Analyst, Vulnerability Management

As an Information Security Analyst, you will be working within our vulnerability management team, which focuses on the technical side of Information Security, ensuring IT systems are operated in a secure manner. The Information Security department monitor our live operation, creating and reacting to alerts and other anomalies identified through automated tools or manual analysis. The vulnerability management (VM) function covers two high-level areas, including owning the processes and schedules relating to the vulnerability scanning of all endpoints in the Business. You will review the results in terms of risk and impact assessment, additionally you will own the scheduling of, and planning for specialist third-party vulnerability and penetration testing, in addition to the collation of reports. Liaising with parts of the Business, will aid your understanding of the risk profile then advice on options to resolve any issues identified. You will work closely with colleagues in the governance and compliance functions to ensure the Company meets its requirements on regulatory matters. This role is eligible for inclusion in the Company’s hybrid working from home policy.

Good understanding of the general principles, practices and technologies of Information and cyber security. Ability to demonstrate hands-on technical experience of conducting vulnerability scanning, evaluation of results and articulation of the risk vulnerabilities may pose. Experience of security related technical investigations. Working knowledge of industry standard information security practices. Knowledge of developments in security technologies and their applications. Awareness of PCI DSS at current version. Excellent communication and documentation skills, including a high attention to detail. Excellent organisational skills with the ability to work to deadlines. Pragmatic approach to the administration of governance and risk. Display a committed, flexible, can-do attitude towards work.