Information Security Analyst, Vulnerability Management

As an Information Security Analyst in our vulnerability management team, you will ensure IT systems are operating in a secure manner in line with regulatory requirements. Join our vulnerability management team as an Information Security Analyst. You keep our IT systems secure and compliant while protecting our live operation. Our Information Security team monitors our live operation around the clock. We spot anomalies and manage vulnerability scanning across all endpoints. You assess risk, plan specialist testing, and help the business understand the urgency of patching. You also work with governance teams to keep us compliant. This role is eligible for inclusion in the Company's hybrid working from home policy.

Responsibilities

Ensure IT systems are operating in a secure manner in line with regulatory requirements; Keep IT systems secure and compliant while protecting the live operation; Monitor the live operation around the clock; Spot anomalies and manage vulnerability scanning across all endpoints; Assess risk and plan specialist testing; Help the business understand the urgency of patching; Work with governance teams to keep the company compliant; Running vulnerability scans using industry-leading tools; Scheduling scanning across the Business to minimise operational impact; Explaining Business risk to technical and non-technical colleagues; Coordinating internal and external resources to meet targets; Embedding security requirements throughout the project lifecycle; Liaising with the Business to ensure all security requirements are met; Acting as an escalation point for security queries; Creating clear and accurate technical documentation; Monitoring emerging threats and escalating findings to the relevant teams; Supporting internal and external audits

Requirements

Strong understanding of information and cyber security principles; Hands-on experience with vulnerability scanning tools and risk assessment; Proven ability to explain technical risk to non-technical teams; Experience with security-related technical investigations; Working knowledge of industry-standard security practices; Awareness of the current Payment Card Industry Data Security Standard (PCI DSS) version; Excellent attention to detail and documentation skills; Strong organisational skills with the ability to meet deadlines; Pragmatic approach to governance and risk administration; Committed and flexible attitude towards work