Senior Cyber Analyst in Vulnerability Management

Senior Cyber Analyst in VULNERABILITY MANAGEMENT

Leeds, United Kingdom
London, United Kingdom

Senior Cyber Security Analyst, Technical Vulnerability Management - Cyber Security

Permanent

Full time

Leeds

Job Description

The Bank of England is looking for an enthusiastic Senior Cyber Security Analyst to join its outstanding Security Posture Management Team. The team is responsible for the provisioning of continuous vulnerability and mis-configuration detection for the whole Bank and works alongside the Penetration Testing team to form the Technical Vulnerability Management Team (TVM).

Flexible Working Options:

This role is open to flexible working patterns, these may include:

• Ability to adapt calendar as needed, this could be to fit in the school run, gym, or appointments
• A 50% in-office attendance requirement can be spread across the month to accommodate diverse working patterns, such as the flexibility to purchase a weekly train ticket for certain weeks
  · Compressed hours (subject to approval and policy within the team)
• Working from abroad policy (subject to approval and policy within the team)

Opportunities in Leeds

We’re excited to be growing our presence in Leeds, a city we’ve been connected to for nearly 200 years! Our modern, accessible office in the City Centre offers a supportive, flexible working environment. The majority of roles, including this one, are now available in Leeds, giving you the chance to build a meaningful career outside of London while contributing to our mission from a dynamic and growing location.

You’ll work collaboratively with London-based colleagues in a hybrid model, with regular opportunities to travel into the London office to meet and connect together in person.

Want to learn more? Discover what makes our Leeds office such a dynamic place to work by visiting our Leeds page for more details.

Day-today you will be responsible for the ongoing security posture of the Bank. Within the Security Posture Management (SPM) team you will be covering strategy, ongoing vulnerability assessment, policy compliance reviews, continual improvement and reporting. Ensuring that the SPM team is staying at the forefront of the SPM practice.

• Supporting the Team Lead with the delivery of Security Posture Management activities including vulnerability and configuration management
• Provide status reports to Cyber Security leadership on VM metrics, key risk indicators, trends, and compliance.
• Using the Bank’s vulnerability management tools (Qualys and Wiz) to monitor security posture.
• Provide technical security guidance in plain English to Bank stakeholders.
• Ability to manage multiple tasks concurrently.
• Assist in the remediation management of identified vulnerabilities, coordinating with other teams in the Technology Directorate.
• Consistently deliver detailed clear documentation for reporting and compliance purposes.
• Manage vulnerability scanning, prioritisation, and remediation workflows across all technology stacks.
• Knowledge of Cyber Security, threat, risk, and technical vulnerability management.
• Strong analytical skills and the ability to parse technical information from multiple sources.
• Good communication skills and capability to present complex information clearly to technical and non-technical audiences (including senior stakeholders).
• Ability to work cross-functionally with multi-functional teams.
• Stay ahead of emerging threats and testing methodologies to enhance security resilience.
• Expertise in integration with risk management frameworks.
• Excellent team leadership, stakeholder management, and communication skills.
• Foster a culture of accountability, collaboration, and continuous learning.
• A strong interest in Cyber Security matters, with the holding of relevant qualifications (e.g. CISSP, Security+, OSCP) being a distinct advantage.
• Experience using Qualys and/or Wiz as security tools.
• Experience working in financial services or government organisations.

The Cyber Security Division (CSD) supports Technology and the wider Bank in achieving its cyber security objectives and is made up of a number of domains with…