Senior Exposure Management Analyst

Bupa; Staines-upon-Thames; Híbrido; GBP 58.000 - 70.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

25 days holiday

Wellbeing programme

Pension

Employee discounts

Descripción de la vacante

Bupa is seeking a Senior Exposure Management Analyst to operate and continuously improve vulnerability and exposure management across our environments. Hybrid working with 2 days in office, salary from £64,000 per year negotiable with experience.

You will consolidate security data, assess risks, and drive remediation across infrastructure, applications and cloud platforms while mentoring teammates and delivering clear updates to leadership.

Formación

• Security+ certification required or strongly preferred.
• Hands-on experience with vulnerability and exposure management tooling.
• Cloud security and exposure management experience.
• Ability to interpret CVEs, CVSS and threat intel for risk prioritisation.
• Knowledge of penetration testing, Breach and Attack simulations and Red Team findings.
• Strong stakeholder engagement skills and remediation leadership.
• Experience mentoring or supporting colleagues to build capability.

Responsabilidades

• Operate and improve vulnerability and exposure management processes.
• Consolidate security data into dashboards and reports.
• Assess vulnerabilities in business risk context for prioritisation.
• Prioritise findings from scanners, tests and cloud data sources.
• Drive remediation with IT, cloud and business teams to closure.
• Provide guidance and mentoring to analysts and colleagues.
• Prepare updates and evidence packs for risk forums and leadership.
• Plan scanning, remediation tracking and reporting to meet SLAs.

Conocimientos

Security+

Vulnerability mgmt

Cloud security

CVEs/CVSS interpretation

Penetration testing

Stakeholder engagement

Mentoring

Descripción del empleo

Job Description: Senior Exposure Management Analyst Grade - C16 Contract – Permanent

Location: Bupa Place (M50 3SP) Angel Court (EC2R 7HJ) Staines (TW18 3DZ) Hybrid working: 2 days per week in the office Working hours: 37.5 hours per week Salary: From £64,000 per annum, negotiable depending on experience Benefits: Role-specific bonus of 10% MBS

We make health happen. At Bupa, we’re passionate about technology. With colleagues, customers, patients and residents in mind you’ll have the opportunity to work on innovative projects and make a real impact on their lives. Right from the start you’ll become part of our digital strategy, joining us on our journey and developing yourself along the way.

How you’ll help us make health happen

• Operate and continuously improve vulnerability and exposure management processes, including authenticated and unauthenticated scanning, agent deployment, coverage checks, validation of findings, cloud exposure reviews and ongoing service improvement.
• Consolidate and normalise security data into a single pane of glass, supporting exposure management, vulnerability records, assignment groups, remediation tracking, exception management, governance evidence and reporting workflows.
• Assess vulnerabilities and exposures in the context of business risk, using severity, exploitability, threat intelligence, asset criticality, exposure, business impact and regulatory requirements to support risk-based prioritisation.
• Correlate, deduplicate and prioritise findings from vulnerability scanning, penetration testing, breach and attack simulation, Red Team activity, cloud platforms and other exposure data sources to provide one clear position on risk and remediation.
• Drive remediation activity with infrastructure, application, cloud, network and business teams, ensuring risk is clearly explained, ownership is agreed, blockers are challenged and actions are tracked through to closure.
• Provides guidance, coaching and mentoring to analysts and colleagues, helping build capability across vulnerability and exposure management practices.
• Prepare clear updates, dashboards and evidence packs for operational teams, risk forums and leadership, highlighting progress, blockers, ownership, business impact and next steps.
• Plans and manages scanning, remediation tracking and reporting activity to support agreed vulnerability management service levels and risk reduction priorities.

Key Skills / Qualifications needed for this role

• Security+ certification required or strongly preferred; additional certifications such as CISSP, SSCP, GSEC, CySA+, ITIL, cloud security or vendor vulnerability management certifications are beneficial.
• Strong hands‑on experience with vulnerability and exposure management tooling, including scan configuration, agent deployment, scan coverage troubleshooting, validation of findings and data quality improvement.
• Practical cloud security and exposure management experience, including understanding cloud assets, misconfigurations, vulnerabilities, ownership and remediation routes.
• Able to interpret CVEs, CVSS, exploitability, threat intelligence, asset criticality and business impact to support risk-based prioritisation.
• Knowledge of penetration testing, breach and attack simulation and Red Team findings, including correlation and deduplication with vulnerability and exposure data.
• Strong stakeholder engagement skills, with experience driving remediation across technical teams and business stakeholders.
• Experience mentoring or supporting colleagues, sharing knowledge and helping improve team capability.

Benefits

Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health, from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits. Joining Bupa in this role you will receive the following benefits and more:

• 25 days holiday per year, pro rata to your contract.
• Access to a range of services to support your physical and mental wellbeing
• Fixed term benefits allowance
• Access to our confidential employee assistance programme
• Workplace pension
• Online discounts covering your everyday shopping, entertainment, eating out and more.

Why Bupa

We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world.

We make health happen by being brave, caring and responsible in everything we do. We encourage all of our people to “Be you at Bupa”, we champion diversity, and we understand the importance of our people representing the communities and customers we serve.

That’s why we especially encourage applications from people with diverse backgrounds and experiences. Bupa is a Level 2 Disability Confident Employer. This means we aim to offer an interview/assessment to every disabled applicant who meets the minimum criteria for the role. We’ll make sure you are treated fairly and offer reasonable adjustments as part of your recruitment process to anyone that needs them.

Time Type: Full time Job Area: IT Locations: Angel Court, London, Staines - Willow House Be at the heart of helping people live longer healthier, happier lives and making a better world. We employ more than 80,000 people globally who are making this a reality.

If you've got the belief, the drive and the talent to help us in our ambition then we’d like to hear from you. Wherever you work, one thing stands out about Bupa people. Our customers are our passion – they’re at the heart of our positively different culture of care. At Bupa you’ll be challenged, you’ll be encouraged to innovates, and collaborate with colleagues who are committed to delivering exceptional experiences. We trust, respect and consider everyone, knowing your difference will make the difference.