About the role
- Have a direct impact on how NFU Mutual’s systems evolve
- Work within a new, highly motivated and dynamic team that is continually approaching ever changing challenges
- Freedom to prioritise your own workload in an agile fashion to ensure NFU Mutual can react to the newest threats and vulnerabilities
You will be responsible for providing a technical and vulnerability management security service on behalf of group IT, working alongside external providers and NFU Mutual staff. Evaluating threats and vulnerability data will be key, recommend solutions to resolve security vulnerabilities in line with our policies and standards.
Key accountabilities for the role will be:
- Using Vulnerability Assessment data, prioritise and recommend the deployment of patches and technical controls for security products in order to ensure risks are understood and maximising technical controls to maintain risk profile within agreed parameters.
- Schedule and deliver pen tests and scans in line with security policy and standards whilst analysing results to ensure risks are understood.
- Monitor risk management consoles and vulnerability management tool sets and other analysis mechanisms.
- Interpret threats, trends and incident data provided by service providers to evaluate risk, using judgement to create solutions resolving security vulnerabilities
- Investigate and resolve technical data and pen tests to rate and advise on the likelihood and impact of cyber incidents and breaches. This will ensure the effective root cause, identification and restoration plan in line with service standards and statutory requirements.
- Build and maintain relationships with Data Owners to understand the information assets and potential security risks to them, ensuring they are considered and included in vulnerability and incident evaluations aligned to security architecture.
- Evaluate, develop and maintain security operations procedures, standards, testing plans and technical baselines to ensure continual service improvement and alignment to our Information Security Policy framework and security architecture standards and principles.
About you
The ideal candidate will have a proven track record of working within an IT or cyber security role. You will be experienced in aspects of IT infrastructure and service with demonstrable experience of performing control and risk-based reviews. Experience of working within a regulatory environment is also desirable.
You will have:
- Experience in vulnerability management environment
- Broad experience across aspects of IT Infrastructure and service
- Experience performing control and risk-based reviews
Qualifications
- Control Objectives for Information and Related Technologies (COBIT) Foundation (desirable)
- Prince 2 Foundation (Desirable)
- ITIL Foundation (Desirable)
Benefits and rewards
When you join our team, you can expect a supportive culture and an attractive range of rewards and benefits including:
- Competitive salary
- Annual bonus (up to 17.5%)
- Up to 80% remote working
- Contributory pension scheme, up to 20%, including your 8% contribution
25 days holiday + bank holidays + buy/sell holiday scheme - £20 contribution to a monthly gym membership – subject to T&Cs
- Health and wellbeing plan - cashback for dentist, opticians, physio and more
- Unlimited access to Refer a Friend £500 bonus scheme
- Life Assurance cover
- Employee discounts on a range of NFU Mutual insurance policies.
Working at NFU Mutual
We’re one of the UK’s leading general insurance and financial services companies. For over 110 years we’ve put our customers at the heart of everything we do. Our people are just as important to us. We pride ourselves on being “a great place to work” and are one of only 39 companies across the globe, and the only organisation with headquarters in the UK, to receive a Gallup Exceptional Workplace 2022 award. We were also named in the LinkedIn Top 25 Companies List 2021.
We offer a supportive culture where we empower and inspire our people to perform, offer them opportunities to grow, and recognise and reward their contribution. Our people are proud to work for a company that respects them and their communities, and they trust us to be financially sustainable, so we are successful now and in the future.
IT Security Vulnerability Analyst employer: NFU Mutual
NFU Mutual is an excellent employer that values collaboration and innovation, offering a hybrid work model that allows for 80% homeworking. With a strong focus on employee development and a supportive work culture, team members are encouraged to grow their skills in data analysis and coding while making a real impact on customer outcomes. The Stratford-upon-Avon office provides a vibrant environment where employees can connect with colleagues across various departments, enhancing both professional and personal growth.
