Information Security Vulnerability Management Analyst

JCB; Uttoxeter; On-site; GBP 31,000 - 69,000; Full time

Benefits offered by this job

33 days holiday

Company pension

Onsite gym

In-house doctor

Dental and optician

ULEV car scheme

Rewards Hub

Cycle to work

Job summary

JCB is seeking a Vulnerability Management Analyst to join our on-site Information Security team in the United Kingdom. The role focuses on managing the vulnerability management process globally, performing scans across IT, OT and SaaS, and coordinating remediation with engineering and IT teams.

You will work in a fast-paced environment, support NIST and Cyber Essentials alignment, and help improve the overall security posture of the group.

Qualifications

• Proven experience in vulnerability management or as Security Analyst/Engineer.
• Strong understanding of vulnerability scanning tools and techniques.
• Familiarity with CVSS scoring and vulnerability prioritisation.
• Knowledge of patch management and secure configurations.
• Ability to work independently in a fast-paced, on-site environment.
• ITIL knowledge is a plus.

Responsibilities

• Manage the Vulnerability Management Process and Platform globally.
• Perform regular vulnerability scans and testing across IT, OT and SaaS systems using industry-standard tools.
• Arrange and manage third parties for security penetration tests on internal and external systems.
• Analyse scan results, prioritise vulnerabilities, and coordinate remediation efforts with relevant teams through to completion.
• Maintain and improve the vulnerability management lifecycle and reporting processes.Feed into the Risk Register and other teams for immediate and future improvements.
• Track and report on remediation progress and risk posture to senior stakeholders.
• Collaborate with IT and engineering teams to ensure secure configurations and patch management, identify root causes of issues, and work to resolve them.
• Support compliance alignment with NIST and Cyber Essentials.
• Assist in threat modelling and risk assessments.
• Maintain documentation and procedures related to vulnerability management.
• Seek out opportunities to improve the groups overall security posture.

Skills

Vulnerability management

Vulnerability scanning

CVSS awareness

NIST framework

Cyber Essentials

Patch management

OT awareness

ITIL knowledge

Analytical skills

Communication skills

Tools

Vulnerability scanning tools

Patch management tools

Job description

Salary: £31,000 - 69,000 per year

Requirements:

• We are looking for someone who is passionate about cyber security and keeping up with the latest trends, threats and mitigations.
• We need proven experience in vulnerability management or previous experience as a Security Analyst or Engineer.
• We need a strong understanding of vulnerability scanning tools and techniques.
• We need familiarity with CVSS scoring and vulnerability prioritisation techniques.
• We need knowledge of patch management processes and secure system configurations.
• Familiarity with OT environments is a plus.
• We need an understanding of security frameworks such as NIST and Cyber Essentials.
• We need someone able to work independently in a fast-paced, on-site environment.
• We need strong analytical and communication skills.
• We need an understanding of IT Service Management principles, ideally ITIL.

Responsibilities:

• Manage the Vulnerability Management Process and Platform globally.
• Perform regular vulnerability scans and testing across IT, OT and SaaS systems using industry-standard tools.
• Arrange and manage third parties for security penetration tests on internal and external systems.
• Analyse scan results, prioritise vulnerabilities, and coordinate remediation efforts with relevant teams through to completion.
• Maintain and improve the vulnerability management lifecycle and reporting processes.Feed into the Risk Register and other teams for immediate and future improvements.
• Track and report on remediation progress and risk posture to senior stakeholders.
• Collaborate with IT and engineering teams to ensure secure configurations and patch management, identify root causes of issues, and work to resolve them.
• Support compliance alignment with NIST and Cyber Essentials.
• Assist in threat modelling and risk assessments.
• Maintain documentation and procedures related to vulnerability management.
• Seek out opportunities to improve the groups overall security posture.

Technologies:

• Support
• ITIL
• Security
• Cloud

More:

We are the Information Security team, responsible for ensuring JCB has the correct level of security integrity to protect our systems, information, personal data and people from cyber-attacks and unauthorised access. We are seeking a detail-oriented and proactive Vulnerability Management Analyst to join our on-site team. This is a permanent, full-time role with a competitive salary. We offer 33 days holiday, access to our company pension, onsite gym, in-house doctor, dentist and visiting optician, an ULEV car scheme, the JCB Rewards Hub with retail discounts, and a Cycle to Work Scheme. We value diversity, welcome applicants from all backgrounds, and are committed to a fair and inclusive recruitment process.

last updated 36 week of 2026