Senior Threat and Vulnerability Analyst

Pearson Education; London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A global education company is seeking a Threat and Vulnerability Management Senior Analyst in London. This role entails developing and managing a vulnerability management program, analyzing security vulnerabilities, and collaborating across teams to ensure timely remediation. Ideal candidates will have strong experience in vulnerability management and cyber threats, complemented by excellent analytical and communication skills. Cybersecurity certifications are a plus.

Qualifications

• Strong experience in vulnerability management.
• Ability to support the management of projects.
• Strong understanding of risk assessment frameworks.
• Experience with security technologies.

Responsibilities

• Develop and implement a comprehensive vulnerability management program.
• Analyze and prioritize vulnerabilities based on business impact.
• Communicate effectively with stakeholders about vulnerabilities.
• Conduct regular reviews and assessments of the program.

Skills

Vulnerability management

Cyber threats understanding

Analytical skills

Communication skills

Problem-solving skills

Education

Cybersecurity certifications (e.g., CISSP, CISA)

Tools

Vulnerability scanning tools

Job description

This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board.

Job Description

About the Role:

We are seeking a highly motivated and experienced Threat and Vulnerability Management Senior Analyst to join our Security team and play a crucial role in safeguarding Pearson. As a senior member of the team, you will be a key player in supporting the development, implementation, and management of our vulnerability management program, ensuring the timely identification, prioritization, and remediation of security vulnerabilities across our assets. You will be a strategic thinker with a deep understanding of cyber threats and mitigation strategies and possess strong leadership and communication skills to effectively collaborate with various teams across the organization.

Responsibilities:

• Support the development and implementation of a comprehensive vulnerability management program aligned with best practices and industry standards.
• Responsible to gather, analyse, and disseminate intelligence on cyber threats.
• Help define and maintain vulnerability scanning procedures and processes, including the selection and configuration of vulnerability scanning tools.
• Analyze and prioritize vulnerabilities based on severity, exploitability, and business impact.
• Help develop and implement remediation plans in collaboration with IT operations and application owners, ensuring timely and effective patching and mitigation.
• Track and report on vulnerability management metrics, including scan coverage, MTTR (mean time to remediation), and compliance with internal policies and industry regulations.
• Communicate effectively with stakeholders at all levels, providing updates on vulnerabilities, risks, and remediation progress.
• Help conduct regular reviews and assessments of the program, identifying areas for improvement and recommending changes.
• Stay up to date on the latest cyber threats and vulnerabilities, and ensure the program reflects evolving threat landscapes.
• You will work collaboratively with cross-functional teams, utilize advanced tools, and leverage your expertise to investigate, contain, eradicate, and recover from major security incidents.

Qualifications:

• Strong experience in vulnerability management.
• Ability to support the management of projects
• Strong understanding of cyber threats, vulnerability assessment methodologies, and risk assessment frameworks.
• Experience with vulnerability scanning tools and security technologies.
• Excellent analytical and problem-solving skills.
• Strong communication, collaboration, and interpersonal skills.
• Ability to work independently and as part of a team.
• Cybersecurity certifications (e.g., CISSP, CISA) a plus.