Tech Operations Analyst

About The Role

Contract type:
Permanent.

Hours:

Full-time, 35 hours.

Location:

Head Office, Nottingham (Hybrid working, minimum 2 days per week).

Application process:

Please apply via the application button which will direct you to our careers site. If you require any adjustments to assist you in applying, please contact

At Nottingham Building Society our talent acquisition approach is rooted in openness and inclusive hiring, so even if you don’t feel you tick every box, we’d still genuinely love to hear from you.

Join us as a Tech Operations Analyst and take a hands‑on role at the centre of keeping our technology secure, resilient and running smoothly.

In this position, you will be responsible for the day‑to‑day operation of vulnerability management, patching and access controls across our core infrastructure and platforms. You will ensure our systems stay protected, up to date and correctly accessed, making a real impact on the security and performance of the organisation.

You will work closely with infrastructure, cloud, service desk and application support teams, becoming a trusted expert who helps maintain and safeguard our technology environment. If you enjoy practical technical work, solving real operational challenges and being in a role where your actions directly improve our security and stability, this is the opportunity for you.

• Vulnerability Scanning & Validation – Perform regular scans across data centre servers, endpoints, network devices, and cloud platforms, then triage and validate findings.
• Patch Management Execution – Plan and deploy OS/application patches and emergency fixes, managing patch schedules and maintenance windows.
• Remediation Verification – Re‑scan systems to confirm successful remediation and maintain accurate vulnerability registers.
• Privileged Access Operations – Operate IAM/PAM platforms, onboarding accounts, rotating/vaulting credentials, configuring access rules, and monitoring privileged sessions.
• Access Governance – Maintain Master Access Lists for key systems and process access changes for joiners, movers, leavers, and temporary elevated access.
• Access Review & SoD Support – Conduct regular logical access reviews and support segregation‑of‑duties controls across operational systems.
• Security Monitoring & Incident Support – Monitor for unpatched systems, privileged access anomalies, and security alerts, supporting incidents by isolating assets, removing access, or applying urgent patches.
• Operational Reporting & Assurance – Produce MI on patch compliance, vulnerabilities, and IAM/PAM coverage, and supply evidence to Info Sec, Risk, and Internal Audit.

• Vulnerability & Security Tooling Expertise – Hands‑on experience with Tanium, Tenable, Qualys, Defender, Rapid7 and familiarity with ticketing platforms such as Service Now or Jira.
• Operational IAM Capability – Working knowledge of IAM tools (e.g., SailPoint) and comfort operating in change windows, on incident bridges and within live production environments.
• PAM & Cloud Desirables – Exposure to PAM tools such as Cyber Ark, Beyond Trust or Azure PIM, plus an understanding of cloud platforms (Azure) and basic Power Shell scripting.
• Technical Operations Background – At least 3 years in IT Operations with practical experience across Windows, Linux, Active Directory and endpoint/server patching.
• Cross‑Functional Collaboration – Proven ability to build strong working relationships across teams and levels, supporting smooth operational delivery.
• Analytical & Detail‑Focused Approach – Able to investigate issues thoroughly, follow defined processes, and maintain high standards of accuracy in operational tasks.
• Education & Professional Readiness – Educated to A‑level (or equivalent) and either experienced in an Analyst role or ready to progress into a more responsible operational position.
• Service Management Awareness – ITIL Foundation beneficial, demonstrating understanding of structured service management practices (not essential).

• Competitive Package: Fair salary benchmarked against market data, annual…