You will need to login before you can apply for a job.

View more categories View less categories Sector Retail and Wholesale Role Senior Executive Contract Type Permanent Hours Full Time

About the role

Join the Information Security Engineering team at John Lewis Partnership to help build a secure future for an iconic brand. We work to protect our customers, Partners, and business against an ever-evolving cyber threat landscape.

The John Lewis Partnership's Information Security strategy is bold and ambitious. We provide a collection of security services, delivered via people, processes and technology. Working collaboratively, these services ensure that customers can shop with us efficiently, safely and securely, every single day.

Our Threat Defence team is at the forefront of our cyber resilience, proactively monitoring threats, identifying vulnerabilities, and engineering robust security defences.

As a Senior Information Security Analyst focusing on Vulnerability Management, you'll be instrumental in identifying, assessing, and driving the remediation of vulnerabilities across our diverse technology estate.

You'll empower our Security Operations Centre to stay ahead of the latest threats by ensuring we understand and address our risk posture effectively. This is a pivotal role where your expertise will directly strengthen our defences and protect millions of customers and Partners.

This is a great opportunity to directly shape our security posture, getting hands-on with leading vulnerability management tools. You'll thrive in an agile, supportive, and highly collaborative team where innovation isn't just encouraged, it's expected.

At a Glance

• Salary: £50,000 - £70,000 depending on experience
  

• Contract type: Permanent
  

• Hybrid Working: Based at our Bracknell Head Office with a flexible hybrid model (typically 1 day per week in the office, primarily Tuesdays, with ad-hoc visits as required by business needs). We support a healthy work-life balance.
  

• Lead the identification and assessment of vulnerabilities across our applications, infrastructure, and cloud environments using our established tooling
  
  
• Develop, refine, and optimise vulnerability scanning profiles, dashboards and reports to ensure comprehensive coverage and actionable insights
  
  
• Analyse vulnerability data to prioritise risks, identify trends, and provide clear, actionable remediation guidance to relevant technology teams
  
  
• Collaborate closely with development, operations, and infrastructure teams to ensure timely and effective remediation of identified vulnerabilities
  
  
• Contribute to the continuous improvement of our vulnerability management processes, policies, and procedures, aligning with industry best practices
  
  
• Provide vulnerability context and analysis to support incident response activities.
  

• Extensive proven experience in a Vulnerability Management role
  
  
• Proven hands-on experience with vulnerability management platforms, such as Qualys
  
  
• Strong understanding of vulnerability assessment methodologies and risk scoring (e.g. CVSS)
  
  
• Strong collaboration skills working with application and infrastructure teams within a security context
  
  
• In-depth working knowledge of security best practices and frameworks (e.g., Mitre ATT&CK, OWASP Top 10, NIST).
  

• Knowledge of cloud security vulnerabilities and associated scanning techniques (specific experience with Google Cloud vulnerabilities would be of particular benefit)
  

• Experience with scripting or automation to enhance vulnerability management processes (e.g. Python) and to drive efficiency and innovation
  

• Familiarity with patch management processes and tools
  

• Relevant Information Security certifications (e.g. CompTIA Security+, CySA+, CEH, CISSP) or a related degree.
  

• Simply upload your CV and complete our application questions.
  We advise saving the application questions to a separate document before entering on Workday for future reference.
  

• Internal Applicants - Please click here to view the job outline - Job Outline - SENIOR INFORMATION SECURITY ANALYST.pdf
  

Company

Learn more about this company

Visit this company’s hub to learn about their values, culture, and latest jobs.

Visit this company’s hub to learn about their values, culture, and latest jobs.

Create a job alert and receive personalised job recommendations straight to your inbox.