Information Security Analyst, Vulnerability Management

bet365 Group; Stoke-on-Trent; Hybrid; GBP 35,000 - 55,000; Full time

Job summary

A leading online gaming company is looking for an Information Security Analyst specializing in Vulnerability Management. The successful candidate will conduct vulnerability scanning, assess risks, and ensure compliance with information security regulations. A strong understanding of security technologies, experience in vulnerability assessment, and excellent communication skills are essential. This role supports a hybrid working model.

Benefits

Eye care

Flu vaccinations

Life Assurance

Qualifications

• Good understanding of principles, practices, and technologies of Information Security.
• Hands-on experience with vulnerability scanning and risk evaluation.
• Knowledge of current PCI DSS standards.

Responsibilities

• Conduct vulnerability scanning across the business.
• Articulate business risk to technical and non-technical colleagues.
• Create technical documentation related to security.

Skills

Understanding of principles of Information Security

Vulnerability scanning experience

Experience in security investigations

Knowledge of information security practices

Communication skills

Organizational skills

Tools

Vulnerability scanning tools

Job description

Information Security Analyst, Vulnerability Management

Stoke-on-Trent Technology

As an Information Security Analyst, you will be working within our vulnerability management team, which focuses on the technical side of Information Security, ensuring IT systems are operated in a secure manner.

Full-time

Closes 28/01/2026

The Information Security department monitor our live operation, creating and reacting to alerts and other anomalies identified through automated tools or manual analysis.

The vulnerability management (VM) function covers two high-level areas, including owning the processes and schedules relating to the vulnerability scanning of all endpoints in the Business.

You will review the results in terms of risk and impact assessment, additionally you will own the scheduling of, and planning for specialist third-party vulnerability and penetration testing, in addition to the collation of reports.

Liaising with parts of the Business, will aid your understanding of the risk profile then advice on options to resolve any issues identified.

You will work closely with colleagues in the governance and compliance functions to ensure the Company meets its requirements on regulatory matters.

This role is eligible for inclusion in the Company’s hybrid working from home policy.

Preferred Skills and Experience

Good understanding of the general principles, practices and technologies of Information and cyber security.

Ability to demonstrate hands-on technical experience of conducting vulnerability scanning, evaluation of results and articulation of the risk vulnerabilities may pose.

Experience of security related technical investigations.

Working knowledge of industry standard information security practices.

Knowledge of developments in security technologies and their applications.

Awareness of PCI DSS at current version.

Excellent communication and documentation skills, including a high attention to detail.

Excellent organisational skills with the ability to work to deadlines.

Pragmatic approach to the administration of governance and risk.

Display a committed, flexible, can-do attitude towards work.

What you will be doing

Conducting vulnerability scanning with class leading tools.

Scheduling of scanning across the entire Business ensuring reporting requirements are met whilst minimising operational impact to endpoints.

Being able to articulate Business risk to both technical and non-technical colleagues.

Scheduling internal and external resources and ensuring that targets are met.

Working within the project process to ensure that the information security aspects are considered up front and throughout the project lifecycle.

Liaising with the Business to ensure we remain compliant with all information security requirements within our operational jurisdictions.

Acting as an escalation point where necessary.

Creating technical documentation.

Staying up to date with new and emerging threats, escalating any of interest to appropriate teams for further evaluation.

Taking an active role in audits where necessary.

Bonus

Eye care and Flu Vaccinations

Life Assurance

Life at bet365

We are a unique global operator with passion and drive to be the best in the industry. Our values form the foundation of culture and shape the unique way that we work. People are our superpower and we support you to be the best you can be.