Security Analyst - Pen Testing Coordinator

Barclays UK; Knutsford; On-site; GBP 40,000 - 55,000; Full time

Job summary

A leading banking institution in the UK is seeking a motivated Security Analyst – Penetration Testing Coordinator to join their Cyber Assurance Team. In this role, you will manage penetration tests, coordinate with third-party test providers, and facilitate communication between stakeholders, ensuring effective risk management and remediation of vulnerabilities. Ideal candidates should have excellent stakeholder engagement, problem-solving skills, and a strong understanding of cyber security policies. Join us in enhancing our cyber defense strategies.

Qualifications

• Experience working with third-party pen-test companies.
• Ability to support Cyber Security Policy understanding.
• Experience in managing security incidents.

Responsibilities

• Facilitate communication between Cyber Assurance Team and stakeholders.
• Manage penetration testing coordination and documentation.
• Conduct risk assessments and implement mitigation strategies.

Skills

Stakeholder engagement

Problem-solving

Time management

Organizational skills

Job description

Join us as a BUK CISO - Security Analyst in Cyber – we are looking for a motivated, technically minded individual to join our Cyber Assurance Team as Penetration Testing Coordinator. This role will primarily support the Vulnerability Management Cyber Domain focusing on Penetration Testing.

You will join a team that's part of a wider Cyber Assurance Team with oversight of all Cyber Domains. As Penetration Testing Coordinator you will be working with third‑party pen‑test companies and testers who conduct the testing, you will work with the BUK Tech teams to understand their IT systems and help define the scope of a Pen Test with the support of Security Consultants. Your role will be to facilitate discussion between the relevant stakeholders, plan the testing and help coordinate the correct SMEs for any technical issues. Whilst the testing is in progress there will be real‑time issues and delays, and you will be facilitating support to help ensure these are addressed in a timely manner, ensuring test documentation is retained for audit purposes and tracking remediation of any vulnerabilities through to closure.

To be successful as a Security Analyst – Pen Testing Coordinator, you should have experience with:

• Excellent stakeholder engagement and communication skills.
• Consistently supports business and technical areas in identifying high‑quality resolutions to control concerns.
• Can work independently and as part of a team as well as being pro‑active.
• Has excellent time‑management and organisational skills.

Some other highly valued skills may include:

• Sound understanding of Cyber Security Policy and Standards and can convey requirements to others.
• Demonstrates ability to solve complex technical problems.
• Understands and can articulate to the business the context and significance of vulnerabilities.

You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking and digital technology, as well as job‑specific technical skills.

Location of this role is Knutsford.

Purpose of the role

To provide a primary liaison service between the business, technology and security functions. In order to ensure the confidentiality, integrity and availability of information, and support the mitigation of security risk.

Accountabilities

• Collaboration with stakeholders to understand their security requirements in business processes and IT projects, to enhance overall risk management.
• Execution of risk assessments to identify and prioritise potential cyber‑security threats that could impact the bank’s operations and data and guide the implementation of mitigation strategies and communicate findings to relevant senior stakeholders.
• Collaboration with business units to develop and implement security policies and procedures for the bank’s operations aligned to the risk management framework.
• Management of the implementation, testing and monitoring of security controls across the bank’s IT systems to ensure the effectiveness of controls and mitigation of risk.
• Execution of training content and sessions to educate employees, enhance cyber‑security awareness and provide guidance on safe online practices.
• Management of complex cyber‑security incidents by collaborating with IT teams and response experts to effectively resolve cases through analysis, expertise support and project supervision.
• Identification of emerging cyber‑security trends, threats and new technologies to address potential risks by advocating the adoption of new security solutions.

Analyst Expectations

• To perform prescribed activities in a timely manner and to a high standard consistently driving continuous improvement.
• Requires in‑depth technical knowledge and experience in their assigned area of expertise.
• Thorough understanding of the underlying principles and concepts within the area of expertise.
• They lead and supervise a team, guiding and supporting professional development, allocating work requirements and coordinating team resources.
• If the position has leadership responsibilities, people leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L – Listen and be authentic, E – Energise and inspire, A – Align across the enterprise, D – Develop others.
• Or for an individual contributor, they develop technical expertise in a work area, acting as an advisor where appropriate.
• Will have an impact on the work of related teams within the area.
• Partner with other functions and business areas.
• Takes responsibility for end results of a team’s operational processing and activities.
• Escalates breaches of policies and procedure appropriately.
• Take responsibility for embedding new policies and procedures adopted due to risk mitigation.
• Advise and influence decision making within own area of expertise.
• Take ownership for managing risk and strengthening controls in relation to the work you own or contribute to. Deliver your work and areas of responsibility in line with relevant rules, regulation and codes of conduct.
• Maintain and continually build an understanding of how your sub‑function integrates with the function, alongside knowledge of the organisation’s products, services and processes within the function.
• Demonstrate understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub‑function.
• Make evaluative judgements based on the analysis of factual information, paying attention to detail.
• Resolve problems by identifying and selecting solutions through the application of acquired technical experience and will be guided by precedents.
• Guide and persuade team members and communicate complex or sensitive information.
• Act as a contact point for stakeholders outside of the immediate function, while building a network of contacts outside the team and external to the organisation.

All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.