Vulnerability Management Analyst – IT/OT & Cloud Security

JCB; Rocester; On-site; GBP 50,000 - 70,000; Full time

Benefits offered by this job

Company pension

On-site gym

In-house doctor

Dentist

Visiting optician

ULEV car scheme

Rewards Hub

High street retailer discounts

Cycle to Work Scheme

Job summary

JCB is seeking an Information Security Vulnerability Management Analyst to join our on-site security team in the United Kingdom. You will identify, assess and mitigate vulnerabilities across IT, OT, Cloud and SaaS environments.

Responsibilities include scanning, prioritising risks, coordinating remediation with IT and engineering, and reporting progress to senior stakeholders while aligning with NIST and Cyber Essentials.

Qualifications

• Experience in vulnerability management or security analyst/engineer roles.
• Understanding of vulnerability scanning tools and techniques.
• Familiarity with CVSS scoring and risk prioritisation.

Responsibilities

• Manage the Vulnerability Management Process and Platform globally.
• Perform regular vulnerability scans across IT, OT and SaaS systems using industry-standard tools.
• Coordinate and manage third-party security penetration tests on internal and external systems.
• Analyse scan results, prioritise vulnerabilities, and drive remediation with relevant teams.
• Maintain lifecycle and reporting processes for vulnerability management.

Skills

Vulnerability management

Security analysis

CVSS scoring

Patch management

ITIL / ITSM

Independent worker

Analytical thinking

Communication skills

OT familiarity

Tools

Vulnerability scanning tools

Job description

JCB is seeking an Information Security Vulnerability Management Analyst to join our on-site security team in the United Kingdom. You will identify, assess and mitigate vulnerabilities across IT, OT, Cloud and SaaS environments.

Responsibilities include scanning, prioritising risks, coordinating remediation with IT and engineering, and reporting progress to senior stakeholders while aligning with NIST and Cyber Essentials.