The Very Group

About usWe’re The Very Group and we’re here to help families get more out of life. We know that our customers work hard for their families and have a lot to balance in their busy lives. That’s why we combine amazing brands and products with flexible payment options on Very.co.uk to help them say yes to the things they love. We’re just as passionate about helping our people get more out of life too, building careers with real growth, a sense of purpose, belonging and wellbeing.About the RoleWe are looking for an Information Security Analyst who will be responsible for delivery of all areas of Information Security policy and procedure at The Very Group. With particular focus on Vulnerability management, Penetration testing and the assurance of the identity access management processes.For this role you will have the following responsibilities:<ul> <li>Arrange and where directed manage cyber threat assessment activities.</li> <li>Deliver vulnerability assessments, arrange penetration tests and red/purple team exercises within The Very Group</li> <li>Cover for the Information Security Specialist where required.</li> <li>Be accountable for fixes and decisions relating to vulnerability assessment services.</li> <li>Assist in producing security assurance metrics related to threat and vulnerability assessments and provide key stakeholders with performance data as required by the Head of Information Security and manager.</li> <li>Support teams within IT Security in the production and maintenance of Security Procedures, Guidelines, Work Instructions, Working Practices and other operational documentation.</li> <li>Provide information to other teams within IT Security as required to support development of threat intelligence, security strategy and all service improvement activities.</li> <li>Responsible for delivering threat and vulnerability assessment services and assuring they are frequently reviewed and where required service improvement plans are implemented.</li> <li>Assist in the establishment and maintenance of IT Security standards and policies.</li> <li>Key contributor in various facets of Security incident response including notification, escalation response and post incident review.</li> <li>Provide general advice and guidance on IT Security related matters as and when required.</li> <li>Assist and support Threat Hunting and Digital Forensics as directed by the Security Operations Lead.</li> <li>Managing and develop IAM/ PUAM functions</li> <li>Ensuring the business is compliant with all issues relating to IAM/ PUAM including legal and regulatory changes affecting UK financial services and engaging in professional development to maintain professional skills and knowledge essential to the position.</li> <li>Build relationships across TVG to support essential security policy adherence</li> </ul>RequirementsWhat you’ll bring<ul> <li>A broad understanding of the Information Security industry and specifically, a solid understanding of UK regulations and compliance.</li> <li>Experience of contributing and improving the Information Security agenda within a corporate organisation</li> <li>The ability to understand and integrate business and security strategies.</li> <li>Experience in IT Security Vulnerability Management.</li> <li>Strong knowledge of security vulnerability assessment tooling, report analysis and remediation plans.</li> <li>Good understanding of networking concepts and enterprise IT systems including OS (Windows, Mac, *nix)</li> <li>Knowledge of Windows Active Directory and Linux identity management </li> <li>Experience with Identity management and privilege user access management in an enterprise environment would be advantageous.</li> <li>Experience in the implementation and day to day running of IAM/ PUAM tooling</li> <li>Experience of cloud based IAM especially with AWS and Office 365</li> <li>An understanding of incident response procedures and standards and the managing of information security and privacy incidents.</li> <li>Excellent interpersonal skills</li> <li>Information Security and /or Information Technology industry qualification would be advantageous (such as CISSP or CISM) or equivalent time served</li> </ul>BenefitsSome of our benefits <ul> <li>Flexible, hybrid working model</li> <li>Inclusive culture and environment, check out our Glassdoor reviews </li> <li>Flexible benefits allowance to suit your needs</li> <li> 30 days holiday + bank holidays</li> <li>Udemy learning platform</li> <li>Bonus potential (performance and business-related)</li> <li>Up to 25% discount on Very.co.uk</li> <li>Matched pension up to 6%</li> <li>More benefits can be found on our career site </li> </ul> How to apply Please note that the talent acquisition team are managing this vacancy directly, and if successful in securing this role, you may be required to undertake a credit, CIFAS and CRB check. What happens next? Our talent acquisition team will be in touch if you’re successful so keep an eye on your emails! We’ll arrange a short call to learn more about you, as well as answer any questions you have. If it feels like we’re a good match, we’ll share your CV with the hiring manager to review, and then be in touch to move to the interview process. Our interview process is tailored to each role and can be in-person and remotely. We will always look to make the adjustments you need to bring your best self to interview. Equal opportunities We’re an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, colour, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Liverpool

Information Security Analyst

About usWe are The Very Group, and we’re here to help families get more out of life. We know that our customers work hard for their families and have a lot to balance in their busy lives. That’s why we combine amazing brands and products with flexible payment options on Very.co.uk to help them say yes to the things they love when they need them most. About the team The information security team is critical to assist in the identification of risk issues to business assets and assist the organisation and partners in the application and delivery of suitable controls to mitigate the risks, by predicting, preventing, detecting and responding to threats and events. About the role The Head of Information Security provides the technical direction of the group’s information security strategy and future state, providing consultancy and subject matter expertise for, and working with, key stakeholders to ensure implementation of technical controls meets the Information Security and business agendas to support the business goals and inform risk appetite. The team consists of 15 people spanning cyber operations and information security. The successful candidate will have an appetite to keep up to date with latest trends, technologies and threats, as well as a wealth of experience operating in highly regulated organisations with experience spanning; <ul> <li>Information Security Technical Operations, Architecture and Engineering Leadership. </li> <li>Ownership and delivery of Information Security strategy roadmap </li> <li>Providing secure development and maintenance of systems, applications and infrastructure, as well as ongoing security monitoring of networks and access. </li> <li>Establishing a comprehensive and approved information security incident management framework (including policy; access to cyber incident investigators and forensics experts; threat-related information; and technical investigation tools). </li> <li>Creating and embedding processes and that employees are appropriately skilled to respond to security incidents. </li> <li>Managing threats and vulnerabilities associated with business applications, systems and networks by scanning for technical vulnerabilities; validating up-to-date patch levels; performing continuous security event monitoring; acting on threat intelligence and protecting information against targeted cyber-attack. </li> <li>Leadership, vision, and direction to the 1st line IT Security team - IT Security Operations, Architecture and Engineering </li> </ul>Some of our benefits <ul> <li>Flexible, hybrid working model </li> <li>Inclusive culture and environment, check out our Glassdoor reviews </li> <li>£10,000 flexible benefits allowance to suit your needs </li> <li>30 days holiday + bank holidays </li> </ul><ul> <li>Bonus potential (performance and business-related) </li> <li>Up to 25% discount on Very.co.uk </li> <li>Matched pension up to 6% </li> <li>More benefits can be found on our career site </li> </ul>How to apply Please note that the talent acquisition team are managing this vacancy directly, and if successful in securing this role, you may be required to undertake a credit, CIFAS and CRB check. What happens next? Our talent acquisition team will be in touch if you’re successful so keep an eye on your emails! We’ll arrange a short call to learn more about you, as well as answer any questions you have. If it feels like we’re a good match, we’ll share your CV with the hiring manager to review, and then be in touch to move to the interview process. Our interview process is tailored to each role and can be in-person and remotely. We will always look to make the adjustments you need to bring your best self to interview. Equal opportunities We’re an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, colour, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Head of Information Security

About the role A Senior Security Consultant to join the Tech Ops team to deliver technical solutions that meet the organisation’s security policies and standards.This will include the provision of expert advice on the selection, implementation, and assurance of information Security controls &amp; processes to maintain the confidentiality, integrity, availability of company services &amp; assets. You will be working effectively with business functions at all levels including project teams and agile squads.Mentoring &amp; guidance of Security consultants within the team and security stakeholders within the wider organisation. This role impacts on all areas of the Group, including regulators, customers, employees, third parties and contractors. It involves being responsible for the provision of guidance and governance ensuring delivered products &amp; services are delivered in accordance with the applicable legislation, regulation, and relevant best practice standardsFor this role you will have the following responsibilities.:<ul> <li>To be a senior security subject matter expert for Tech Ops and the organisation. </li> <li>To be the Senior Consultant assigned to an individual business tribe.</li> <li>Act as a mentor to security consultants and security champions.</li> <li>Undertake Security Threat Modelling.</li> <li>Define Security Requirements</li> <li>Document Security Risk Assessments</li> <li>Scope &amp; Facilitate Penetration Tests.</li> <li>Shape and develop the Information Security mindset of a Tribe, working with Security Champions to develop training &amp; awareness, Security Metrics and improvement use cases.</li> <li>Undertaking professional development to maintain professional skills and knowledge essential to the position.</li> <li>Staying abreast with Information and Cyber Security trends, threats and legal &amp; regulatory changes.</li> </ul>RequirementsWhat you’ll bring <ul> <li>Practical experience of AWS Services.</li> <li>Strong mentoring &amp; stakeholder management skills.</li> <li>Experience in:<ul> <li>Securing services in cloud platforms.</li> <li>Application security lifecycle, including secure by design process.</li> <li>CI/CD pipelines &amp; automated testing.</li> <li>Security testing tools.</li> </ul> </li> <li>An understanding of Industry Standards such as NIST, OWASP etc.</li> <li>Information Security and /or Information Technology industry qualifications preferred (such as CISSP or CISM).</li> <li>Ability to communicate complex information to senior stakeholders.</li> <li>Experience of agile delivery methodologies.</li> <li>Good understanding and experience of threat and risk modelling (STRIDE, DREAD).</li> <li>Good understanding and experience of the Secure Software Development Lifecycle.</li> </ul>BenefitsSome of our benefits <ul> <li>Flexible, hybrid working model</li> <li>Flexible benefits allowance to suit your needs</li> <li>30 days holiday + bank holidays </li> <li>Bonus potential (performance and business-related)</li> <li>Up to 25% discount on Very.co.uk </li> <li>Matched pension up to 6%</li> <li>More benefits can be found on our career site </li> </ul> How to apply Please note that the talent acquisition team are managing this vacancy directly, and if successful in securing this role, you may be required to undertake a credit, CIFAS and CRB check. What happens next? Our talent acquisition team will be in touch if you’re successful so keep an eye on your emails! We’ll arrange a short call to learn more about you, as well as answer any questions you have. If it feels like we’re a good match, we’ll share your CV with the hiring manager to review, and then be in touch to move to the interview process. Our interview process is tailored to each role and can be in-person and remotely. We will always look to make the adjustments you need to bring your best self to interview. About us We’re The Very Group – home to Very.co.uk and a 3,250-strong team of super talented people, all passionate about making good things easily accessible to more people so they can live life well. We combine amazing brands and products with flexible payment options that help people say yes when it matters most. Equal opportunities We’re an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, colour, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Senior Security Consultant

About the role Aa a Security Consultant to join the Tech Ops team to deliver technical solutions that meet the organisation’s security policies and standards. This will include the provision of expert advice on the selection, implementation and assurance of information Security controls &amp; processes in order to maintain the confidentiality, integrity, availability of company services &amp; assets. Working effectively with business functions at all levels including project teams and agile squads. Mentoring &amp; guidance of Security Champions and security stakeholders within the wider organisation This role impacts on all areas of the Group, including: regulators, customers, employees, third parties and contractors. It involves being responsible for the implementation of new security defences and the operation of existing in accordance with best practices, company policy and regulatory requirements. For this role you will have the following responsibilities.: <ul> <li>To be a security subject matter expert for Tech Ops and the organisation. </li> <li>To be a Security Consultant assigned to an individual business tribe.</li> <li>Act as a mentor to security champions.</li> <li>Undertake Security Threat Modelling.</li> <li>Define Security Requirements.</li> <li>Document Security Risk Assessments</li> <li>Scope &amp; Facilitate Penetration Tests.</li> <li>Shape and develop the Information Security mindset of a Tribe, working with Security Champions to develop training &amp; awareness, Security Metrics and improvement use cases.</li> <li>Undertaking professional development to maintain professional skills and knowledge essential to the position.</li> <li>Staying abreast with Information and Cyber Security trends, threats and legal &amp; regulatory changes.</li> <li>Developing Information and Cyber Security consulting functions.</li> </ul>Requirements<ul> <li>Practical experience of AWS Services.</li> <li>Strong mentoring &amp; stakeholder management skills.</li> <li>Experience in:<ul> <li>Securing services in cloud platforms.</li> <li>Application security lifecycle, including secure by design process.</li> <li>CI/CD pipelines &amp; automated testing.</li> <li>Security testing tools.</li> </ul> </li> <li>An understanding of Industry Standards such as NIST, OWASP etc.</li> <li>Information Security and /or Information Technology industry qualifications preferred (such as CISSP or CISM).</li> <li>Ability to communicate complex information to senior stakeholders.</li> <li>Experience of agile delivery methodologies.</li> <li>Good understanding and experience of threat and risk modelling (STRIDE, DREAD).</li> <li>Good understanding and experience of the Secure Software Development Lifecycle.</li> </ul>BenefitsSome of our benefits <ul> <li>Flexible, hybrid working model</li> <li>Flexible benefits allowance to suit your needs</li> <li>30 days holiday + bank holidays </li> <li>Bonus potential (performance and business-related)</li> <li>Up to 25% discount on Very.co.uk </li> <li>Matched pension up to 6%</li> <li>More benefits can be found on our career site </li> </ul> How to apply Please note that the talent acquisition team are managing this vacancy directly, and if successful in securing this role, you may be required to undertake a credit, CIFAS and CRB check. What happens next? Our talent acquisition team will be in touch if you’re successful so keep an eye on your emails! We’ll arrange a short call to learn more about you, as well as answer any questions you have. If it feels like we’re a good match, we’ll share your CV with the hiring manager to review, and then be in touch to move to the interview process. Our interview process is tailored to each role and can be in-person and remotely. We will always look to make the adjustments you need to bring your best self to interview. About us We’re The Very Group – home to Very.co.uk and a 3,250-strong team of super talented people, all passionate about making good things easily accessible to more people so they can live life well. We combine amazing brands and products with flexible payment options that help people say yes when it matters most. Equal opportunities We’re an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, colour, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Security Consultant

About the role We are looking for an Information Security Manager to join the Information Security Team team. This role impacts on all areas of the Group, including regulators, customers, all employees, 3rd parties and contractors. It involves being responsible for the implementation of new security defences and the operation of existing in accordance with best practices and company policy. Key responsibilities will include. Policy and Security Architecture <ul> <li>Reviewing, updating and delivering the group wide Information Security risk framework, maintaining and improving the Information Security policy and associated standards and guidelines.</li> <li>Protection of the group’s assets (people, physical, informational and IT systems) from identified risk by implementing and gaining assurance on appropriate security controls.</li> </ul> Information Risk Management <ul> <li>Conducting Information Security Risk Assessments on new business applications, IT changes, and group projects, identifying residual risk and recommending appropriate mitigating action.</li> <li>Ensuring security reviews are conducted on relevant 3rd parties and recommending appropriate mitigating action.</li> </ul> Identity and Access Management <ul> <li>Designing and maintaining effective processes for the governance of access control.</li> <li>Management of the IAM / PUAM team.</li> </ul> Security Operations <ul> <li>Working with the Information Security Operations manager to ensure maintenance and improvements of the Security Operations team to identify potential breaches for further investigation.</li> <li>Owning, the Vulnerability Management processes to identify vulnerabilities on IT systems, recommending appropriate mitigating action.</li> <li>Arranging for Penetration testing as required </li> </ul> Governance, Risk and Compliance <ul> <li>Conducting and reporting on IT and Information Security policy assurance.</li> <li>Assisting in continuous group wide threat assessments to identify and report on risk appetite position.</li> <li>Identifying, tracking and reporting IT and Information Security risk and mitigating options.</li> <li>Working with both external and internal auditors to provide information and guidance.</li> </ul>RequirementsWhat you’ll bring The successful candidate will bring a broad understanding of the Information Security industry and specifically, a solid understanding of UK regulations and compliance. You will be someone who keeps abreast with information (cyber) security issues, legal and regulatory changes affecting UK financial services, alongside engaging in professional development to maintain professional skills and knowledge essential to the position such as keeping abreast of the latest trends, technologies and threats. You will also bring with you. <ul> <li>Experience of contributing and improving the Information Security agenda within a corporate organisation</li> <li>Good commercial knowledge with the ability to understand and integrate business and security strategies.</li> <li>Good technical understanding of development and operational platforms including the Cloud.</li> <li>A thorough understanding of Identity Access Management and Privileged User Account Management (IAM, PUAM)</li> <li>Experience with Vulnerability management and the associated controls.</li> <li>Deep understanding of Cyber Risk</li> <li>Understanding of Threat intelligence and how it can be used to drive business decisions.</li> <li>Experience of agile methods of working, threat and risk modelling (STRIDE, DREAD) and experience of the Secure Software Development Lifecycle</li> </ul>BenefitsSome of our benefits <ul> <li>Flexible, hybrid working model</li> <li>£6,500 Flexible benefits allowance to suit your needs</li> <li>30 days holiday + bank holidays </li> <li>Bonus potential (performance and business-related)</li> <li>Up to 25% discount on Very.co.uk </li> <li>Matched pension up to 6%</li> <li>More benefits can be found <a href="https://theverygroup.jobs/life-at-tvg/benefits" rel="noopener noreferrer nofollow ugc" target="_blank">on our career site</a> </li> </ul> How to apply Please note that the talent acquisition team are managing this vacancy directly, and if successful in securing this role, you may be required to undertake a credit, CIFAS and CRB check. What happens next? Our talent acquisition team will be in touch if you’re successful so keep an eye on your emails! We’ll arrange a short call to learn more about you, as well as answer any questions you have. If it feels like we’re a good match, we’ll share your CV with the hiring manager to review, and then be in touch to move to the interview process. Our interview process is tailored to each role and can be in-person and remotely. We will always look to make the adjustments you need to bring your best self to interview. About us We’re The Very Group – home to <a href="https://www.very.co.uk/" rel="noopener noreferrer nofollow ugc" target="_blank">Very.co.uk</a> and a 3,250-strong team of super talented people, all passionate about making good things easily accessible to more people so they can live life well. We combine amazing brands and products with flexible payment options that help people say yes when it matters most. Equal opportunities We’re an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, colour, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Information Security Manager

Apply to Cyber Security Jobs in Merseyside in companies remotely and near you. New Cyber Security Jobs in Merseyside added daily.

Job Position and Company	Location	Tags	Posted
Information Security Analyst at The Very Group	Remote Full Time CISM Analyst Manager
Head of Information Security at The Very Group	Remote Full Time Manager
Senior Security Consultant at The Very Group	Remote Full Time CISM Consultant Manager
Security Consultant at The Very Group	Remote Full Time CISM Consultant Manager
Information Security Manager at The Very Group	Remote Full Time Manager

Cyber Security Jobs in Merseyside

0 Cyber Security Jobs in Merseyside. Page 1 of 1

5 closed cyber security jobs in merseyside:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Merseyside

0 Cyber Security Jobs in Merseyside. Page 1 of 1

5 closed cyber security jobs in merseyside:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter