Security Analyst

Job description

A phenomenal opportunity has arisen for a Security Analyst in Norwich to join our CISO Global Cyber Operations team! The Global Cyber Operations Team plays a pivotal role at Aviva; they protect the global estate by detecting and preventing cyber-attacks from occurring.

We are also considering individuals with a comprehensive understanding and experience of IT infrastructure management and support, with a strong desire to develop a career in Cyber Security and able to demonstrate good security knowledge and disciplines.

This is an exciting time to join our dynamic team of security experts, who have a passion for delivering market leading IT security services. You will be provided with the opportunity to expand on your current skills within a FTSE100 financial company and support and develop operational processes to maintain the vulnerability management capability.

Duties & Responsibilities

• Analyse results of vulnerability scans and adding threat/asset context to prioritise remediation activities
• Maintain and further improve the scanning scope and capability of the vulnerability scanning service
• Work with and supporting CISO areas and support teams to assist in validating, risk assessing, and remediating vulnerabilities along with treat Intelligence, threat hunting, red teams, operations centre and incident response
• Ensure vulnerability management processes are applied consistently across Aviva, and that acceptable risk levels are met
• Implement clear strategies, processes, procedures, and guidelines for vulnerability management aligned to relevant security policies and standards
• Refine and evolve the IT security services to provide effective, timely, and sustainable service to customers embedded in daily operations
• Create and maintain effective reporting

If your skillset fits with the capabilities listed below, we would love to hear from you!

• Solid technical experience and security knowledge of complex IT systems
• Experience working with private cloud hosted services (IaaS, SaaS, PaaS)
• Understanding of Cybersecurity standards and frameworks, e.g.: NIST, CIS, OWASP, SANS, ISO 27001
• Ability to assess vulnerabilities and understand their exploitation, measure the exposure, and provide appropriate risk ratings
• Cybersecurity Tactics, Techniques and Procedures (TTPs), understanding how threat agents orchestrate and manage attacks
• Knowledge of ticketing systems and workflows required to direct remediation activity in line with SLA frameworks and tracking
• Data collection and analytics, interpretation, and presentation with a keen attention to detail and accuracy
• Able to establish and maintain collaboration, understanding, trust and credibility with globally dispersed stakeholders at all levels

Desirable Skills

• Operating Systems to include: Wintel, Unix, Mainframe, Network, and Mobile (Smartphones)
• Enterprise services: Networks, Routing, Firewalls, Proxies, Gateways
• Professional qualifications in computer technology
• Experience with Vulnerability Management tools like Qualys, Tenable, or Nexpose would be an advantage

What will you get for this role?

• Salary between £23,400 - £40,000 depending on skills, experience and qualifications
• Generous defined contribution pension scheme
• Annual performance related bonus and pay review
• Holiday allowance of 29 days plus bank holidays and the option to buy/sell up to 5 additional days
• Up to 40% discount for some Aviva products through “My Aviva Extras” plus discounts for Friends and Family (some exclusions apply)
• Excellent range of flexible benefits to include a matching share save scheme

We care about the wellbeing of our employees

How you feel at home, work and all aspects of your life are important to us. Our programme – ‘Be Healthy', ‘Be Mindful', ‘Be Secure' and ‘Be Awesome' supports your physical, mental, financial and social wellbeing.

Here are just a few highlights:

• You'll be able to download Aviva Digital GP - a 24/7 personal GP service that enables you to get a video consultation with a GP and pharmacy service at the touch of a button
• We offer all UK employees subscriptions to Headspace for FREE
• We have subsidised 70% off the normal gym membership prices, meaning for a reduced monthly fee you will have access to a wide range of fitness venues

Additional Information and Equal Opportunity

One of Aviva's core values is Care More, and this is brought to life through the flexible ways we love to work. This may include working from home some of the time, or flexible work schedules to accommodate parent and carer responsibilities, further studies and hobbies.

Our diversity and inclusion policies and initiatives are shaping an environment where everyone feels welcome regardless of age, disability, race, ethnicity, gender, gender identity, religion, culture, sexual orientation, national origin, marital status, pregnancy, maternity or those with other caring responsibilities. Our approach helps to ensure that Aviva is a place which values difference and provides equal opportunities for all.

As a disability confident employer, we guarantee to interview anyone with a disability (as defined in The Equality Act 2010) whose application meets the minimum criteria for the post. (By ‘minimum criteria' we mean that you must provide us with evidence which demonstrates that you generally meet the level of competence required, as well as meeting any of the qualifications, skills or experience defined as essential). Please apply through the website and then email the contact listed in the advert to notify us that you meet the conditions for the guaranteed interview scheme.

We prefer all applications to be submitted online, however if you require an alternative method of applying please contact Lacey Lane Mckoy in the Resourcing team on 0207 255 0884 or Lacey.lane-mckoy@aviva.com