TVM Security Analyst: Lead Vulnerability Management & Risk

Primark; Reading; On-site; GBP 45,000 - 65,000; Full time

Job summary

Primark is seeking a TVM Security Analyst to strengthen its Threat and Vulnerability Management capability within the Cyber team in Reading. You will identify, prioritise and report vulnerabilities across Primark's technology environment, coordinating remediation with diverse teams to align with business risk and cyber security objectives.

The role requires hands-on vulnerability scanning and remediation tracking, plus collaboration with internal and external stakeholders to ensure effective

Qualifications

• 2+ years of experience in cyber security, vulnerability management or security operations.
• Experience with risk-based prioritisation of vulnerabilities.
• Hands-on use of vulnerability scanning, remediation tracking and validation.
• Strong understanding of cyber risk, vulnerability lifecycles and remediation best practices.
• Ability to collaborate with technical teams and external Suppliers.
• Experience with vulnerability management tools such as Tenable, Qualys, Rapid7 or Microsoft Defender Vulnerability Management is advantageous.
• Relevant cyber security certifications such as Security+, CySA+ or equivalent are desirable.

Responsibilities

• Identify, analyse, prioritise and report vulnerabilities across Primark's technology environment.
• Operate vulnerability management processes across vulnerability scanning, cloud posture, application security and third-party data sources.
• Assess vulnerabilities using severity, exploitability, exposure, asset criticality and business context.
• Coordinate remediation activities with infrastructure, application, cloud and third-party teams.
• Monitor remediation progress against agreed SLAs and escalated high-risk or overdue issues.
• Produce reporting on vulnerability trends, remediation performance and key cyber risk areas.
• Validate remediation evidence and support retesting activities to confirm vulnerabilities have been effectively addressed

Skills

Cyber security

Vulnerability management

Security operations

Vulnerability scanning

Remediation tracking

Collaboration with teams

Security certifications

Education

Security+ certification

CySA+ certification

Tools

Tenable

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Job description

Primark is seeking a TVM Security Analyst to strengthen its Threat and Vulnerability Management capability within the Cyber team in Reading. You will identify, prioritise and report vulnerabilities across Primark's technology environment, coordinating remediation with diverse teams to align with business risk and cyber security objectives.

The role requires hands-on vulnerability scanning and remediation tracking, plus collaboration with internal and external stakeholders to ensure effective