Vulnerability Analyst

At Frasers Group we’re rethinking retail. Through digital innovation and unique store experiences, we’re serving our consumers with the world’s best sports, premium and luxury brands globally. As a leader in the industry, we’re elevating the retail experience for our consumers through our collection of established brands, including Sports Direct, FLANNELS, USC, Frasers, and GAME.

Our vision -We are building the planet’s most admired and compelling brand ecosystem

Our purpose
- We are elevating the lives of the many with access to the world’s best brands and experiences

At Frasers Group, we fear less and do more. Our people are forward thinkers who are driven to operate outside of their comfort zone to change the future of retail, embracing challenges along the way. The potential to elevate your career is massive, the experience unrivalled. To be able to make the most of it you need to live and breathe our principles:

• Own itand back yourself
  - Own the basics, own your role and own the result
• Think without limits
  - Think, think fast, think fearlessly
• Be relevant
  -Relevantto our people, our partners and the planet

Are you ready to join the Fearless?

The Role:

We are seeking a Vulnerability Analyst to support and enhance Frasers Group’s cybersecurity capabilities by identifying, assessing, and helping remediate vulnerabilities across our global retail, digital, and enterprise environments.

Reporting to the Sec Ops Manager, this role will focus on the day-to-day delivery of vulnerability management activities. The Vulnerability Analyst will play a hands-on role in identifying security weaknesses, assessing risk, and working with technical and operational teams to ensure timely remediation.

The role will also support the coordination of operational penetration testing activities, ensuring testing is effectively scheduled, delivered, and tracked through to remediation.

Working closely with risk and operational teams, the Vulnerability Analyst will help translate technical findings into business risk, ensuring vulnerabilities are prioritised based on real-world impact and exploitability. By combining vulnerability data with threat context and operational insight, the role will contribute to reducing the organisation’s overall attack surface.

In addition, the role will support security monitoring and incident response activities when required, particularly in identifying vulnerabilities linked to active threats.

Key Responsibilities:

• Support the delivery of the vulnerability management programme across enterprise, cloud, and retail environments.
• Perform regular vulnerability assessments using scanning tools, security platforms, and threat intelligence sources.
• Analyse and triage vulnerabilities, prioritising remediation based on risk, exploitability, and business impact.
• Support the coordination of operational penetration testing activities, including scheduling, scoping, and tracking remediation of findings.
• Ensure penetration testing results are clearly documented, prioritised, and fed into remediation workflows.
• Work closely with risk and operational teams to identify vulnerabilities associated with high-risk processes or emerging threats.
• Collaborate with engineering, infrastructure, and operational teams to track and support remediation of identified vulnerabilities.
• Monitor and report on vulnerability status, risks, and remediation progress to the Sec Ops Manager and relevant stakeholders.
• Support incident response activities by identifying root-cause vulnerabilities and contributing to remediation actions.
• Assist in improving vulnerability scanning coverage, tooling, and processes.
• Contribute to identifying attack paths and systemic weaknesses within the environment.
• Apply industry frameworks…