Information Security Vulnerability Management Analyst

Salary: £31,000 - 69,000 per year

Requirements:

• We are looking for someone who is passionate about cyber security and keeping up with the latest trends, threats and mitigations.
• We need proven experience in vulnerability management or previous experience as a Security Analyst or Engineer.
• We need a strong understanding of vulnerability scanning tools and techniques.
• We need familiarity with CVSS scoring and vulnerability prioritisation techniques.
• We need knowledge of patch management processes and secure system configurations.
• Familiarity with OT environments is a plus.
• We need an understanding of security frameworks such as NIST and Cyber Essentials.
• We need someone able to work independently in a fast-paced, on-site environment.
• We need strong analytical and communication skills.
• We need an understanding of IT Service Management principles, ideally ITIL.

Responsibilities:

• Manage the Vulnerability Management Process and Platform globally.
• Perform regular vulnerability scans and testing across IT, OT and SaaS systems using industry-standard tools.
• Arrange and manage third parties for security penetration tests on internal and external systems.
• Analyse scan results, prioritise vulnerabilities, and coordinate remediation efforts with relevant teams through to completion.
• Maintain and improve the vulnerability management lifecycle and reporting processes.
• Feed into the Risk Register and other teams for immediate and future improvements.
• Track and report on remediation progress and risk posture to senior stakeholders.
• Collaborate with IT and engineering teams to ensure secure configurations and patch management, identify root causes of issues, and work to resolve them.
• Support compliance alignment with NIST and Cyber Essentials.
• Assist in threat modelling and risk assessments.
• Maintain documentation and procedures related to vulnerability management.
• Seek out opportunities to improve the groups overall security posture.

Technologies:

• Support
• ITIL
• Security
• Cloud

More:

We are the Information Security team, responsible for ensuring JCB has the correct level of security integrity to protect our systems, information, personal data and people from cyber-attacks and unauthorised access. We are seeking a detail-oriented and proactive Vulnerability Management Analyst to join our on-site team. This is a permanent, full-time role with a competitive salary. We offer 33 days holiday, access to our company pension, onsite gym, in-house doctor, dentist and visiting optician, an ULEV car scheme, the JCB Rewards Hub with retail discounts, and a Cycle to Work Scheme. We value diversity, welcome applicants from all backgrounds, and are committed to a fair and inclusive recruitment process.

last updated 36 week of 2026