Information Security Analyst, Vulnerability Management

Overview

We’re one of the world’s leading online gambling companies. We employ over 10,000 people and serve millions of customers in multiple languages. We empower our employees to push boundaries and explore new ideas, with growth opportunities and opportunities to make an impact in online gambling. We are a forward-thinking company driving software innovation and secure operations across our live environment.

This role is in the Information Security team in the Vulnerability Management function. You will help ensure IT systems operate securely and in compliance with regulatory requirements, monitor live operations around the clock, and manage vulnerability scanning across endpoints.

Location and working pattern: hybrid work with eligibility for inclusion in the Company’s hybrid working from home policy, with a second office location in Manchester, UK.

• Role:
  Information Security Analyst, Vulnerability Management
• Employment type:
  
  Full-time
• Department:
  Information Security
• Shift pattern:
  Days
• Workplace type:
  Hybrid
• Second office location: UK - Manchester
• Job type:
  Standard

• Run vulnerability scans using industry-leading tools.
• Schedule scanning across the business to minimise operational impact.
• Explain business risk to technical and non-technical colleagues.
• Coordinate internal and external resources to meet targets.
• Embed security requirements throughout the project lifecycle.
• Liaise with the business to meet all security requirements.
• Act as an escalation point for security queries.
• Create clear and accurate technical documentation.
• Monitor emerging threats and escalate findings to relevant teams.
• Support internal and external audits.

• Strong understanding of information and cyber security principles.
• Hands-on experience with vulnerability scanning tools and risk assessment.
• Proven ability to explain technical risk to non-technical teams.
• Experience with security-related technical investigations.
• Working knowledge of industry-standard security practices.
• Aware of the current PCI DSS version.
• Excellent attention to detail and documentation skills.
• Strong organisational skills with the ability to meet deadlines.
• Pragmatic approach to governance and risk administration.
• Committed and flexible attitude towards work.

For accessibility and equal opportunities, please note that we support reasonable adjustments in the recruitment process upon request.