What is the opportunity?

The Vulnerability Assessment Analyst forms part of a proactive, engaging and purposeful Information Security team that incorporates Strategy, Architecture, Governance, Risk Management, Cyber Resilience, Operations, Engineering, Cyber Engagement and Improvement teams/functions.

The successful candidate will contribute to the continuous improvement of the Services provided through the role and collaborate with other teams and Services.

In this role, you will:

• Operate the vulnerability assessment Service through operational and strategic activities including vulnerability scanning & assessments and the tracking and support of vulnerability remediation while keeping pace with relevant business and industry trends.
• Coordinate and support .the vulnerability assessment program initiatives, process & technology integration and technical assessment
• Manage, mentor and oversee the activities of a dedicated team in the regular scanning of the Bank's environments and generation of ad-hoc and periodic reports.
• Work closely with infrastructure and threat intelligence teams to assist in timely alignment of threats with appropriate verification and remediation activities.
• Lead collaborative engagements with business and IT representatives relating to existing vulnerabilities and associated remediation activities.
• Drive continuous improvements to the scanning service; specifically in the areas of scanning coverage and the handling of false positives and exceptions to standards.
• Be a first-line escalation point for the team.

What will make you stand out?

This role requires a good understanding of both existing and emerging Information Security technologies and methodologies, supported by proven analytical and critical?'thinking skills. The ideal person brings working knowledge of industry standards and best practices, with a clear focus on identifying problems and driving effective remediation.

They will be able to work within strict legal and confidentiality requirements, especially given the sensitivity of cyber?'security work along with a structured, organised approach and the ability to take ownership of tasks through to completion. Building and maintaining productive working relationships is key, as is a strong customer?'focused demeanour and an appreciation for risk management.

Essential Qualifications

• Professional SSCP or CISSP qualification
• Experience of Qualys toolset and capabilities

More about the team

Group Information Security & Resilience (GISR) is a diverse and collaborative team with multiple capabilities. With global cyber threats constantly evolving, the team is critical to protecting one of the Group's most important and valuable assets: Which is Information!

GISR not only protect the security of the Bank but also enable colleagues to develop secure ways of working and to make secure choices both in and outside of the office.

This is a hybrid role, based primarily at IT Centre, Cabinteely, Dublin. We typically ask colleagues to spend a minimum of 8 days per month working in-person to support collaboration and connection. Specific arrangements will be confirmed by your recruiter to ensure they meet the needs of the role and team.

#li-hybrid #ij-hybrid

Why work with us?

The Bank of Ireland company culture prioritises work-life balance with a commitment to hybrid working, along with 23 days annual leave and excellent pension contributions. Family can mean different things to different people; we offer 6 months paid leave, an innovative fertility and surrogacy policy along with working parent and carer supports.

Your health and wellbeing is important to us; we offer a substantial health insurance contribution, employee assistance program, WebDoctor and financial wellbeing coaches available. We also encourage and support staff to pursue educational and professional qualifications to grow and enhance your career!