Overview
An Information Security Analyst, who will work within our vulnerability management team, focusing on the technical side of Information Security to ensure IT systems are operated in a secure manner. The Information Security department monitors live operation, creating and reacting to alerts and other anomalies identified through automated tools or manual analysis. The vulnerability management (VM) function covers owning the processes and schedules relating to the vulnerability scanning of all endpoints in the Business. You will review results in terms of risk and impact, own the scheduling of and planning for specialist third-party vulnerability and penetration testing, and collate reports. You will liaise with various teams within the Business to enhance their understanding of the Company\'s risk profile and provide guidance on effective solutions for identified vulnerabilities. You will work closely with governance and compliance functions to ensure the Company meets regulatory requirements. This role is eligible for inclusion in the Company’s hybrid working from home policy.
Key responsibilities
* Conduct vulnerability scanning with class-leading tools.
* Schedule scanning across the entire Business, ensuring reporting requirements are met while minimising operational impact to endpoints.
* Articulate Business risk to both technical and non-technical colleagues.
* Schedule internal and external resources and ensure targets are met.
* Work within the project process to ensure information security considerations are included up front and throughout the project lifecycle.
* Liaise with the Business to ensure compliance with all information security requirements within operational jurisdictions.
* Act as an escalation point where necessary.
* Create technical documentation.
* Stay up to date with new and emerging threats and escalate items of interest to appropriate teams for further evaluation.
* Take an active role in audits where necessary.
Qualifications and experience
* Good understanding of the general principles, practices and technologies of Information and cyber security.
* Hands-on technical experience of conducting vulnerability scanning, evaluating results and articulating risks to vulnerabilities.
* Experience of security-related technical investigations.
* Working knowledge of industry-standard information security practices.
* Knowledge of developments in security technologies and their applications.
* Awareness of PCI DSS (current version).
* Excellent communication and documentation skills, with high attention to detail.
* Excellent organisational skills with the ability to meet deadlines.
* Pragmatic approach to governance and risk management.
* Committed, flexible, can-do attitude towards work.
Employment details
* Seniority level: Mid-Senior level
* Employment type: Full-time
* Job function: Information Technology
* Industries: Gambling Facilities and Casinos
By applying to us you are agreeing to share your Personal Data in accordance with our Recruitment Privacy Policy which can be found at https://content001.bet365.com/Careers/Documents/privacypolicy.pdf
#J-18808-Ljbffr