Hybrid Information Security Analyst, Vulnerability Management

bet365 Group; Hempstalls; Hybrid; GBP 50,000 - 75,000; Full time

Benefits offered by this job

Eye care

Flu Vaccinations

Life Assurance

Job summary

bet365 Group is seeking an Information Security Analyst to manage vulnerability scanning and risk assessment in a live operation. The role focuses on securing IT systems, ensuring regulatory compliance, and supporting audits within a hybrid working setup.

You will monitor threats, coordinate resources, and explain technical risk to stakeholders while embedding security throughout projects and governance processes.

Qualifications

• Strong understanding of information and cyber security principles.
• Hands-on experience with vulnerability scanning tools and risk assessment.
• Proven ability to explain technical risk to non-technical teams.
• Experience with security-related technical investigations.
• Working knowledge of industry-standard security practices.
• Awareness of PCI DSS version.

Responsibilities

• Run vulnerability scans using industry-leading tools.
• Schedule scanning across the business to minimise operational impact.
• Explain business risk to technical and non-technical colleagues.
• Coordinate internal and external resources to meet targets.
• Embed security requirements throughout the project lifecycle.
• Liaise with the business to ensure we meet all security requirements.
• Act as escalation point for security queries.
• Create clear and accurate technical documentation.
• Monitor emerging threats and elevate findings to relevant teams.
• Support internal and external audits.

Skills

Vulnerability management

Information security

Risk assessment

Explain risk to non-technical

Security investigations

Security practices

PCI DSS awareness

Documentation

Organisational skills

Tools

Vulnerability scanners

Job description

bet365 Group is seeking an Information Security Analyst to manage vulnerability scanning and risk assessment in a live operation. The role focuses on securing IT systems, ensuring regulatory compliance, and supporting audits within a hybrid working setup.

You will monitor threats, coordinate resources, and explain technical risk to stakeholders while embedding security throughout projects and governance processes.