Role Description  

The role ensures IT vulnerabilities are identified, evaluated, and mitigated in line with Local and Group policies, covering on-prem, cloud, network, application, and end-user devices. It involves developing and enhancing vulnerability and patch management processes, as well as standardizing patching and build procedures across all asset classes. The position includes regular reporting on vulnerability and patch status and forecasting future needs for senior stakeholders.

The role can be based anywhere in the UK, however, there is likely to be a requirement to work from the Guildford office approximately for 1-2 day per week at least 6-8 days x per month, and also a requirement to travel to other UK offices to attend meetings etc. when required.   

Salary Information

Pay:  Circa £90,000

Pay is based on relevant experience, skills for the role, and location. Salary is only one part of our total reward package.

About You 

• You will be ensuring regular vulnerability assessments of the organization’s IT systems and applications are conducted.
• Analysing and interpreting vulnerability scan results, prioritising risks, and recommending remediation actions.
• Collaborating with Onshore and Offshore outsourced IT, Application Owners and security teams to develop and implement vulnerability management strategies.
• Monitoring and tracking the status of identified vulnerabilities and ensure timely remediation.
• Maintaining list of exempt devices with remediation plan to bring back into specification
• Staying up-to-date with the latest security threats, vulnerabilities, and industry best practices.
• Preparing and presenting vulnerability assessment reports to management and stakeholders.
• Assisting in the development and maintenance of security policies, procedures, and standards.
• Understanding technology interdependencies and their impact on vulnerability management.
• Embedding vulnerability management into the IT lifecycle, including development, deployment, maintenance, and decommissioning, ensuring vulnerability management is integrated at every stage.
• Managing and ensuring consistency of Configuration of servers and workplace devices to agreed standards including spot check of actual configurations deployed.
• Managing 3rd party supplier to deliver a vulnerability and patch management capability that meets AZ UKs ongoing requirements 

Essential Skills

• Deep technical knowledge of security-relevant systems (e.g., Active Directory, Qualys Vulnerability Management, FireEye technology, ArcSight).
• Good technical knowledge of a broad range of IT solutions across on-prem, cloud, network and end user technologies.
• Good knowledge of business security requirements and their implementation.
• Understanding of technology interdependencies and their impact on security.
• Ability to analyse configurations and ensure they are inline with policy.
• Strong Excel, PowerBI experience.

We support the government scheme “Access to Work” please feel free to ask us about the access to work scheme. 

Qualifications

• Relevant certifications such as CISSP, CEH, or GIAC are preferred.
• Degree (preferred).
• Strong knowledge of vulnerability management tools and technologies (e.g. Qualys, Nessus).
• Experience with security frameworks and standards (e.g. ISO27001, NIST).

Experience

• Experience conducting risk assessments, especially from an information security and business continuity perspective.
• Experience of IT lifecycle management, including development, deployment, maintenance, and decommissioning.
• Experience of managing stakeholders across all levels and working with outsourced suppliers.
• Experience of creating and presenting executive summary reports.
• Experience of working in heavily outsourced environment
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Ability to work independently and as part of a team

What We Will Offer You  

Recognised and rewarded for a job well done, we have a range of flexible benefits for you to choose from- so you can pick a package that’s perfect for you. We also offer flexible working options, global career opportunities across the wider Allianz Group, and fantastic career development and training. That’s on top of enjoying all the benefits you’d expect from the world’s number one insurance brand, including: 

• Flexible buy/sell holiday options 
• Hybrid working
• Annual performance related bonus 
• Contributory pension scheme 
• Development days 
• A discount up to 50% on a range of insurance products including car, home and pet 
• Retail discounts  
• Volunteering days