Overview
Information Security Analyst, Vulnerability Management at bet365 in Stoke-On-Trent, England, United Kingdom.
As an Information Security Analyst, you will be working within our vulnerability management team, focusing on the technical side of Information Security to ensure IT systems are operated in a secure manner. The vulnerability management function covers owning the processes and schedules relating to the vulnerability scanning of all endpoints in the business. You will review results for risk and impact, own scheduling and planning for specialist third-party vulnerability and penetration testing, and collate reports. You will liaise with parts of the business to understand the risk profile and advise on options to resolve issues identified. You will work with governance and compliance functions to help the company meet regulatory requirements. This role is eligible for inclusion in the company’s hybrid working from home policy.
Responsibilities
* Review vulnerability scan results to assess risk and impact.
* Own the scheduling and planning of specialist third-party vulnerability and penetration testing.
* Collate and report on vulnerability findings and risk posture.
* Liaise with business units to understand risk profiles and advise on remediation options.
* Collaborate with governance and compliance functions to meet regulatory requirements.
* Maintain awareness of current threats and coordinate with relevant teams.
* Act as an escalation point when necessary and contribute to technical documentation.
Qualifications
* Good understanding of information and cyber security principles, practices, and technologies.
* Hands-on experience with vulnerability scanning, evaluation of results, and articulation of associated risk.
* Experience with security-related technical investigations.
* Working knowledge of standard information security practices and PCI DSS awareness.
* Excellent communication and documentation skills with high attention to detail.
* Strong organizational skills and ability to meet deadlines.
* Pragmatic approach to governance and risk management; flexible and proactive attitude.
Additional Information
* Use of vulnerability scanning tools and scheduling across the business while minimizing operational impact.
* Ability to articulate business risk to technical and non-technical colleagues.
* Scheduling internal and external resources to meet targets.
* Involvement in project processes to address information security requirements up front and throughout the lifecycle.
* Liaison with the business to ensure compliance with information security requirements in operational jurisdictions.
* Acting as an escalation point where necessary; creating technical documentation.
* Staying up to date with new and emerging threats and escalating for further evaluation as needed.
* Active role in audits where necessary.
By applying to bet365 you agree to share your personal data in accordance with our Recruitment Privacy Notice.
Employment details
* Seniority level: Associate
* Employment type: Full-time
* Job function: Information Technology
* Industries: Gambling Facilities and Casinos
Note: This job description reflects the responsibilities and requirements at the time of posting and is subject to change.
#J-18808-Ljbffr