Information Security Vulnerability Management Analyst

Information Security Vulnerability Management Analyst

Uttoxter (5 days per week on site)

70-75k

• Manage the Vulnerability Management Process and Platform globally
• Perform regular vulnerability scans and testing across IT, OT and SaaS systems using industry-standard tools
• Arrange and Manage 3rd Parties for Security Penetration Tests on internal and external systems
• Analyse scan results, prioritise vulnerabilities, and coordinate remediation efforts with relevant teams - see through to completion
• Maintain and improve the vulnerability management lifecycle and reporting processes
• Feed in to Risk Register and other teams for immediate and future improvements
• Track and report on remediation progress and risk posture to senior stakeholders
• Collaborate with IT and engineering teams to ensure secure configurations and patch management - find the root causes of issues and work to resolve
• Support compliance alignment with NIST, and Cyber Essentials
• Assist in threat modelling and risk assessments
• Maintain documentation and procedures related to vulnerability management
• Seek out and exploit opportunities for improvement to the group's overall security posture.

• Passionate about cyber security and keeping up with the latest trends, threats and mitigations
• Proven experience in vulnerability management or previous role(s) as Security Analyst/Engineer
• Strong understanding of vulnerability scanning tools and techniques
• Familiarity with CVSS scoring and vulnerability prioritisation techniques.
• Knowledge of patch management processes and secure system configurations.
• A proven IT background to understand and interpret findings and communicate to stakeholders
• Familiarity with OT environments is a plus
• Understanding of security frameworks such as NIST, and Cyber Essentials
• Ability to work independently in a fast-paced, on-site environment
• Strong analytical and communication skills.
• Understanding of IT Service Management principles ideally ITIL.