Senior Security Analyst

We’re a UK-based digital bank dedicated to getting the basics right and offering straightforward savings and mortgages.

This is an on call role with an allowance provided

As a senior security analyst you will support the operation and continuous improvement of the Bank’s security operations and assurance capabilities. Including the security monitoring and incident response, vulnerability and threat management, security testing, third-party assurance, security risk management, and colleague awareness. You will provide subject matter expertise across these areas, independently manage operational security activity, and guides colleagues to improve the controls and services that protect the Bank and its customers from cyber security threats.

Key Responsibilities

• Monitor security threats and coordinate the investigation and response to cyber incidents.
• Manage vulnerability assessments, penetration testing and remediation of security weaknesses.
• Support cyber security risk assessments, security assurance and security-by-design across technology and business change.
• Assess third-party security risks and support audit and regulatory requirements.
• Deliver security awareness, phishing simulations and colleague security training.
• Produce security reporting and continuously improve the Bank’s security controls and processes.

Skills, Knowledge & Expertise

• Demonstrable experience working in a broad cyber security operations and assurance role.
• Experience investigating security events and coordinating incident response activity.
• Experience managing vulnerability and penetration-testing findings through to remediation.
• Experience undertaking security risk assessments and providing evidence for audit or assurance activity.
• Experience working with outsourced security providers and security technology suppliers.
• Working knowledge of recognised security frameworks and practices, such as NIST CSF, ISO 27001 and MITRE ATT&CK.
• 25 days holiday PLUS your BIRTHDAY off
• Pension contribution with Royal London
• Life Assurance
• Private medical, dental and optical health insurance with Axa
• Free breakfast available

Data Protection

We anticipate that we will retain your data as part of the recruitment process for no longer than is necessary for the purpose for which it was collected unless we have sought your consent to keep your data for future suitable job vacancies.

The personal information we have collected from you will be shared with Cifas who will use it to prevent fraud, other unlawful or dishonest conduct, malpractice, and other seriously improper conduct. If any of these are detected you could be refused certain services or employment. Your personal information will also be used to verify your identity. Further details of how your information will be used by us and Cifas, and your data protection rights, can be found by (

#J-18808-Ljbffr