Senior Vulnerability Analyst - ESO

at  National Grid

ABOUT US

At National Grid ESO, our mission is to meet the challenges of the future and deliver cleaner, affordable electricity. We constantly strive to do this better by using technology and innovation to transform the way we work.

KEY ACCOUNTABILITIES

• Help deliver, maintain, and improve the vulnerability management program for the organisation.
• Identify, assess, prioritise, and organise remediation of vulnerabilities across the IT infrastructure, systems and applications.
• Coordinate and collaborate with internal and external stakeholders, such as IT teams, business units, vendors, auditors, and regulators.
• Help develop and implement vulnerability management policies, standards, procedures, and best practices.
• Provide help with vulnerability management projects, initiatives, and strategies.
• Conduct vulnerability assessments, scans, tests, and reviews.
• Help to scope and organise penetration testing conducted throughout the business.
• Provide guidance to the organisation on the risk associated with the vulnerabilities that exist and the most effective mitigating actions that can be taken.

Great Britain’s electricity system is undergoing an ambitious, exciting and vital transformation. Together with industry, we are creating a cleaner, greener system, one that protects the planet and serves generations to come.
Within the scope of the ESO Security team a new capability is being created, which will provide industry leading vulnerability management during our transformation and beyond to day-to-day operations. This exciting opportunity will allow the post holder to influence the design of, shape and deliver a cutting-edge vulnerability management service, within ESO, and will play a pivotal role in supporting its evolution in support of the ESO Security strategy.
The Senior Vulnerability Analyst will, as part of a team, identify, assess, prioritise, and organise remediation of vulnerabilities, while spearheading process improvements within the function, leveraging technological advancements within the field. The post holder will use their collaboration and communication skills to share their vision with other stakeholders, both internal and external, ensuring the capability is delivered appropriately. They will also foster a proactive security culture and help strengthen the organisation’s resilience by effectively delivering an essential area of a comprehensive cyber defence in a rapidly changing threat landscape.
This role can be based from Wokingham or Warwick, and we continue to offer hybrid working from office and home.