Senior Threat and Vulnerability Analyst

Role:           Senior Threat and Vulnerability Analyst

Company:   Pearson

Location:     London - Hybrid

About the Role:

We are seeking a highly motivated and experienced Threat and Vulnerability Management Senior Analyst to join our Security team and play a crucial role in safeguarding Pearson. As a senior member of the team, you will be a key player in supporting the development, implementation, and management of our vulnerability management program, ensuring the timely identification, prioritization, and remediation of security vulnerabilities across our assets. You will be a strategic thinker with a deep understanding of cyber threats and mitigation strategies and possess strong leadership and communication skills to effectively collaborate with various teams across the organization.

Responsibilities:

• Support the development and implementation of a comprehensive vulnerability management program aligned with best practices and industry standards.
• Responsible to gather, analyse, and disseminate intelligence on cyber threats.
• Help define and maintain vulnerability scanning procedures and processes, including the selection and configuration of vulnerability scanning tools.
• Analyze and prioritize vulnerabilities based on severity, exploitability, and business impact.
• Help develop and implement remediation plans in collaboration with IT operations and application owners, ensuring timely and effective patching and mitigation.
• Track and report on vulnerability management metrics, including scan coverage, MTTR (mean time to remediation), and compliance with internal policies and industry regulations.
• Communicate effectively with stakeholders at all levels, providing updates on vulnerabilities, risks, and remediation progress.
• Help conduct regular reviews and assessments of the program, identifying areas for improvement and recommending changes.
• Stay up to date on the latest cyber threats and vulnerabilities, and ensure the program reflects evolving threat landscapes.
• You will work collaboratively with cross-functional teams, utilize advanced tools, and leverage your expertise to investigate, contain, eradicate, and recover from major security incidents.

Qualifications:

• Strong experience in vulnerability management.
• Ability to support the management of projects
• Strong understanding of cyber threats, vulnerability assessment methodologies, and risk assessment frameworks.
• Experience with vulnerability scanning tools and security technologies.
• Excellent analytical and problem-solving skills.
• Strong communication, collaboration, and interpersonal skills.
• Ability to work independently and as part of a team.
• Cybersecurity certifications (e.g., CISSP, CISA) a plus.