Senior Cyber Security Analyst, Technical Vulnerability Management - Cyber Security
Permanent
Full time
Location: Leeds/London
Job Description
The Bank of England is looking for an enthusiastic Senior Cyber Security Analyst to join its outstanding Security Posture Management Team. The team is responsible for the provisioning of continuous vulnerability and mis-configuration detection for the whole Bank and works alongside the Penetration Testing team to form the Technical Vulnerability Management Team (TVM).
Flexible Working Options:
This role is open to flexible working patterns, these may include:
- Ability to adapt calendar as needed, this could be to fit in the school run, gym, or appointments
- A 50% in-office attendance requirement can be spread across the month to accommodate diverse working patterns, such as the flexibility to purchase a weekly train ticket for certain weeks · Compressed hours (subject to approval and policy within the team)
- Working from abroad policy (subject to approval and policy within the team)
Opportunities in Leeds
We’re excited to be growing our presence in Leeds, a city we’ve been connected to for nearly 200 years! Our modern, accessible office in the City Centre offers a supportive, flexible working environment. The majority of roles, including this one, are now available in Leeds, giving you the chance to build a meaningful career outside of London while contributing to our mission from a dynamic and growing location. You’ll work collaboratively with London-based colleagues in a hybrid model, with regular opportunities to travel into the London office to meet and connect together in person.
Want to learn more? Discover what makes our Leeds office such a dynamic place to work by visiting our Leeds page for more details.
A day in the role
Day-today you will be responsible for the ongoing security posture of the Bank. Within the Security Posture Management (SPM) team you will be covering strategy, ongoing vulnerability assessment, policy compliance reviews, continual improvement and reporting. Ensuring that the SPM team is staying at the forefront of the SPM practice.
Role Requirements:
- Supporting the Team Lead with the delivery of Security Posture Management activities including vulnerability and configuration management
- Provide status reports to Cyber Security leadership on VM metrics, key risk indicators, trends, and compliance.
- Using the Bank’s vulnerability management tools (Qualys and Wiz) to monitor security posture.
- Provide technical security guidance in plain English to Bank stakeholders.
- Ability to manage multiple tasks concurrently.
- Assist in the remediation management of identified vulnerabilities, coordinating with other teams in the Technology Directorate.
- Consistently deliver detailed clear documentation for reporting and compliance purposes.
Minimum Criteria:
- Manage vulnerability scanning, prioritisation, and remediation workflows across all technology stacks.
- Knowledge of Cyber Security, threat, risk, and technical vulnerability management.
- Strong analytical skills and the ability to parse technical information from multiple sources.
- Good communication skills and capability to present complex information clearly to technical and non-technical audiences (including senior stakeholders).
- Ability to work cross-functionally with multi-functional teams.
- Stay ahead of emerging threats and testing methodologies to enhance security resilience.
Essential Criteria
- Expertise in integration with risk management frameworks.
- Excellent team leadership, stakeholder management, and communication skills.
- Foster a culture of accountability, collaboration, and continuous learning.
Desirable Criteria
- A strong interest in Cyber Security matters, with the holding of relevant qualifications (e.g. CISSP, Security+, OSCP) being a distinct advantage.
- Experience using Qualys and/or Wiz as security tools.
- Experience working in financial services or government organisations.
How this role fits into the wider Bank
The Cyber Security Division (CSD) supports Technology and the wider Bank in achieving its cyber security objectives and is made up of a number of domains with responsibility for operating and improving the Bank’s cyber security controls. Security Posture Management is responsible for the Cyber Defence domain. This domain is responsible for ensuring potential cyber-attacks are responded to and potential impacts to the Banks mission are reduced.
Our Approach to Inclusion
The Bank values diversity, equity and inclusion. We play a key role in maintaining monetary and financial stability, and to do that effectively, we believe we need a workforce that reflects the society we serve.
At the Bank of England, we want all colleagues to feel valued and respected, so we're working hard to build an inclusive culture which supports people from all backgrounds and communities to be at their best at work. We celebrate all forms of diversity, including (but not limited to) age, disability, ethnicity, gender, gender identity, race, religion, sexual orientation and socioeconomic status. We believe that it’s by drawing on different perspectives and experiences that we’ll continue to make the best decisions for the public.
We welcome applications from individuals who work flexibly, including job shares and part time working patterns. We've also partnered with external organisations to support us in making adjustments for candidates and employees in the recruitment process where they're needed.
For most roles where work can be carried out at home, we aim for colleagues to spend half of their time in the office, with a minimum of 50% per month. Subject to that minimum requirement, individuals and managers should work together to find what works best for them, their team and stakeholders.
Finally, we're proud to be a member of the Disability Confident Scheme . If you wish to apply under this scheme, you should check the box in the ‘Candidate Personal Information’ under the ‘Disability Confident Scheme’ section of the application.
Salary and Benefits Information
We encourage flexible working, part time working and job share arrangements. Part time salary and benefits will be on a pro-rated basis as appropriate.
London: £61,440 - £69,120
Leeds: £55,280 - £62,190
In addition, we also offer a comprehensive benefits package as detailed below:
- Currently a non-contributory, career average pension giving you a guaranteed retirement benefit of 1/80th of your annual salary for every year worked. There is the option to increase your pension (to 1/65th) or decrease (to 1/105th) in exchange for salary through our flexible benefits programme each year. The Bank has the discretion to vary standard accrual rates and dial up and dial down rates at any time and to withdraw dial up and dial down options at any time.
- A discretionary performance award based on a current award pool.
- An 8% benefits allowance with the option to take as salary or purchase a wide range of flexible benefits.
- 26 days’ annual leave with option to buy up to 12 additional days through flexible benefits.
- Private medical insurance and income protection.
National Security Vetting Process
Employment in this role will be subject to the National Security Vetting clearance process (and typically can take between 6 to 12 weeks post offer) and the passing of additional Bank security checks in accordance with the Bank policy. Further information regarding the vetting and security clearance requirements for the role will be provided to the successful applicant, and information about how the Bank processes personal data for these purposes, is set out in the Bank's Privacy Notice .
The Bank of England welcomes applications from all candidates, but as a UK Visas and Immigration (UKVI) approved sponsor, we have a responsibility to comply with the Immigration Rules and guidance. As such, our ability to employ individuals who require sponsorship for immigration purposes is limited. The Bank cannot guarantee that you and / or the role you are applying for will be eligible for sponsorship and that any application made to UKVI will be successful. Eligibility will therefore be considered on a case by case basis.
The Application Process
Important: Please ensure that you complete the ‘work history’ section and answer ALL the application questions fully.
All candidate applications are anonymised to ensure that our hiring managers will not be able to see your personal information, including your CV, when reviewing your application details at the screening stage. It’s therefore really important that you fill out the work history and application form questions, as your answers will form a critical part of the initial selection process.
The assessment process will comprise of two interview stages.
This role closes on 15th July.
Please apply online, ensuring that you complete your work history and answer ALL the application questions fully and in detail as your application will not be considered if all mandatory questions are not fully completed.
