Cybersecurity Risk Analyst
Posted 1 day ago by The Curve Group
Negotiable
Undetermined
Hybrid
London Area, United Kingdom
Summary: The Cyber Vulnerability Management Analyst role is a fixed-term contract focused on managing and remediating identified cyber vulnerabilities within a globally recognized bank. The position involves close collaboration with third-party vendors and requires the preparation of management information reports. The analyst will assess vulnerabilities from internal and external scans, prioritize remediation efforts, and ensure compliance with established timelines. This hybrid role allows for a combination of in-office and remote work.
Key Responsibilities:
- Support the IT & Cyber Security Manager in delivering business strategy.
- Manage remediation work related to identified vulnerabilities, including patch testing and implementation.
- Collaborate with third-party vendors during the remediation process.
- Prepare MI/Dashboard reports for stakeholders.
- Perform daily assessments of vulnerabilities from internal and external scans.
- Evaluate, risk assess, and prioritize vulnerabilities for remediation within established timelines.
- Work closely with SMEs/vendors of relevant systems.
- Understand cloud technologies such as Azure/Amazon Web Services and Oracle Cloud.
Key Skills:
- Bachelor’s degree in Computer Science, Cyber Security, or related field.
- Cyber Security Professional Qualifications/Certifications.
- Understanding of IT Security principles, standards, and regulations (e.g., ISO 27001, NIST, CIS, PCI DSS, GDPR).
- CISM/CISSP certifications.
- Experience with Patch Management Applications, EDR/XDR systems, Antivirus, NAC - Forescout.
- Knowledge of vulnerability scanning tools (e.g., Tenable One, Qualisys).
- Familiarity with vulnerability scoring systems (CVSS/CMSS).
- Incident/Response & Forensic Management Skills.
- IT Technical Admin Support for Azure and Oracle Cloud Infrastructure.
- Microsoft Windows Support & administration, CE+, ISO27001.
- Email and Information Security Filtering/Monitoring Solutions, Egress.
- Hands-on experience with Linux and Mac Administration Support.
- Good understanding of Windows and Linux patching.
Salary (Rate): undetermined
City: London Area
Country: United Kingdom
Working Arrangements: hybrid
IR35 Status: undetermined
Seniority Level: undetermined
Industry: IT
Cyber Vulnerability Management Analyst Fixed Term Contract (Maternity Cover) 18 months Our Client is a globally recognised, successful bank who provide world-class services to various institutions and individuals. Offering a comprehensive range of retail and corporate financial services/products, this thriving business boasts over 10 million active customers in over 700 business locations. Due to business requirements, we are now looking to acquire the services of an experienced Senior Compliance Officer, Monitoring & Assurance. Please note that this is a hybrid role with 3 days in the office and 2 days working from home.
Key Responsibilities: In this fixed term contract role, you will be part of the team supporting the IT & Cyber Security Manager to plan and deliver our business strategy in line with our long-term goals. The role of Cyber Vulnerability Management Analyst is to deal with all remediation work in relation to identified vulnerabilities inclusive of patch testing and implementation within SLA. The job holder will work very closely with all third-party vendors involved in the remediation process. The job holder will also prepare the necessary MI/Dashboard reports for the relevant stakeholders and alleviate the workload of the IT Service desk function when required. The primary responsibilities of the role is to perform daily assessment of vulnerabilities identified by internal and external scans. Evaluate, risk assess and rate the results of the scan, prioritise all vulnerabilities discovered and remediate/patch within the established remediation timeline(s)/SLA. The role also requires the job holder to work closely with the SMEs/vendors of the relevant systems. Understanding of cloud technologies such as Azure/Amazon Web Services and Oracle Cloud Infra is essential.
Key Skills/Experience: Essential: Bachelor’s degree, preferably in Computer Science, Cyber Security or Cyber Security Professional Qualifications/Certifications Desirable: General understanding of IT Security principles, standards and regulations (e.g. ISO 27001, NIST, CIS, PCI DSS and GDPR) CISM/CISSP Patch Management Applications, EDR/XDR systems. Antivirus, NAC - Forescout Vulnerability Scanning Tool e. Tenable One, Qualisys Knowledge of vulnerability scoring systems (CVSS/CMSS) Incident/Response & Forensic Management Skills IT Technical Admin Support - Azure, Oracle Cloud Infrastructure (OCI Cloud) Microsoft Windows Support & administration, CE+, ISO27001 Email and Information Security Filtering/Monitoring Solutions, Egress Hands on experience on Linux and Mac Administration Support Good understanding of Windows and Linux patching