Senior Security Analyst

In this senior role, you will support the operation and continuous improvement of the Bank’s security operations and assurance capabilities, spanning monitoring, incident response, vulnerability and threat management, security testing, third-party assurance, risk management, and colleague awareness. You provide SME guidance across these areas and independently manage operational security activities to strengthen controls that protect customers from cyber threats. You will coordinate investigations, oversee remediation of vulnerabilities and pen-tests, and support audits and risk assessments. This on-call role includes an allowance and offers hybrid working to balance responsiveness withcolla

• Competitive salary
• 25 days holiday plus your birthday off
• Pension contribution with Royal London
• Life Assurance
• Private medical, dental and optical health insurance
• Hybrid working

• Monitor threats and coordinate cyber incident investigations and responses
• Oversee vulnerability assessments, penetration testing, and remediation of weaknesses
• Support cyber security risk assessments, assurance activities, and security-by-design in tech and business changes
• Assess third-party security risks and assist with audits/regulatory requirements
• Deliver security awareness programs, phishing simulations, and staff training
• Produce security reporting and drive continuous improvement of security controls and processes

• Broad experience in cyber security operations and assurance
• Experience investigating security events and coordinating incident response
• Experience managing vulnerability and penetration-testing findings through remediation
• Experience performing security risk assessments with audit/assurance evidence
• Experience working with outsourced security providers and security technology suppliers
• Working knowledge of NIST CSF, ISO 27001, and MITRE ATT&CK

• Strong communication and collaboration
• Independent working style with proactive problem solving
• Analytical mindset with attention to detail
• Incident response and security monitoring
• Vulnerability management and remediation
• Penetration testing and security testing