TVM Analyst

Primark; Reading; On-site; GBP 45,000 - 65,000; Full time

Job summary

Primark is seeking a TVM Security Analyst to strengthen its Threat and Vulnerability Management capability within the Cyber team in Reading. You will identify, prioritise and report vulnerabilities across Primark's technology environment, coordinating remediation with diverse teams to align with business risk and cyber security objectives.

The role requires hands-on vulnerability scanning and remediation tracking, plus collaboration with internal and external stakeholders to ensure effective

Qualifications

• 2+ years of experience in cyber security, vulnerability management or security operations.
• Experience with risk-based prioritisation of vulnerabilities.
• Hands-on use of vulnerability scanning, remediation tracking and validation.
• Strong understanding of cyber risk, vulnerability lifecycles and remediation best practices.
• Ability to collaborate with technical teams and external Suppliers.
• Experience with vulnerability management tools such as Tenable, Qualys, Rapid7 or Microsoft Defender Vulnerability Management is advantageous.
• Relevant cyber security certifications such as Security+, CySA+ or equivalent are desirable.

Responsibilities

• Identify, analyse, prioritise and report vulnerabilities across Primark's technology environment.
• Operate vulnerability management processes across vulnerability scanning, cloud posture, application security and third-party data sources.
• Assess vulnerabilities using severity, exploitability, exposure, asset criticality and business context.
• Coordinate remediation activities with infrastructure, application, cloud and third-party teams.
• Monitor remediation progress against agreed SLAs and escalated high-risk or overdue issues.
• Produce reporting on vulnerability trends, remediation performance and key cyber risk areas.
• Validate remediation evidence and support retesting activities to confirm vulnerabilities have been effectively addressed

Skills

Cyber security

Vulnerability management

Security operations

Vulnerability scanning

Remediation tracking

Collaboration with teams

Security certifications

Education

Security+ certification

CySA+ certification

Tools

Tenable

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Job description

Technology at Primark

Our technology team is actively shaping the next wave of advancements. Engaged with innovative initiatives, your expertise will propel our business into the future. Collaborating with a creative team of tech enthusiasts, you'll contribute your unique skills to fuel our technological advancements.

Join Primark's Cyber team as a TVM Security Analyst, helping to strengthen the organisation's Threat and Vulnerability Management capability. You'll play a key role in identifying, prioritising and tracking security vulnerabilities across a complex global technology estate, ensuring remediation activities are aligned to business risk and cyber security objectives.

What You'll Do

• Identify, analyse, prioritise and report vulnerabilities across Primark's technology environment.
• Operate vulnerability management processes across vulnerability scanning, cloud posture, application security and third-party data sources.
• Assess vulnerabilities using severity, exploitability, exposure, asset criticality and business context.
• Coordinate remediation activities with infrastructure, application, cloud and third-party teams.
• Monitor remediation progress against agreed SLAs and escalated high-risk or overdue issues.
• Produce reporting on vulnerability trends, remediation performance and key cyber risk areas.
• Validate remediation evidence and support retesting activities to confirm vulnerabilities have been effectively addressed

What You'll Bring

• 2+ years' experience within cyber security, vulnerability management or security operations.
• Experience assessing and prioritising vulnerabilities using a risk-based approach.
• Hands-on experience with vulnerability scanning, remediation tracking and validation processes.
• Strong understanding of cyber risk, vulnerability lifecycles and remediation best practices.
• Ability to collaborate effectively with technical teams and external suppliers.
• Experience with vulnerability management tools such as Tenable, Qualys, Rapid7 or Microsoft Defender Vulnerability Management is advantageous.
• Relevant cyber security certifications such as Security+, CySA+ or equivalent are desirable.

About Primark

At Primark, people matter. They're the beating heart of our business and the reason we've grown from our first store in Dublin in 1969 to over 80,000 colleagues and over 500 stores in 20 countries today and growing.

So, what's a career at Primark all about? The positive impact you're making, the experiences you're having and the people you're with. It's that feeling that turns a job into something more. Celebrating the wins, working at pace, and pulling through the challenging times with passion, courage, and your team by your side. It's what drives us every day.

You're our driving force. Embrace what sets you apart, own your career and develop in ways you never expected. Leave your mark. And do it your way.

If you need any reasonable adjustments or have an accessibility request, during your recruitment journey, such as extended time or breaks between online assessments, a sign language interpreter, mobility access, or assistive technology please contact your talent acquisition specialist.

All offers of employment are subject to background checks, including right to work, reference education and for some roles criminal, and financial checks. If you have any concerns, please reach out to our talent acquisition team to discuss.