Supports cyber security operations by monitoring security tools, investigating alerts and incidents, managing vulnerabilities, coordinating penetration testing, improving security controls, and producing risk reports. The role also contributes to threat intelligence, SOC detection use cases, incident response procedures, and security projects involving cloud technologies, integrations, and new capabilities.
The Group Information Security Team (GIST) is a central, highly visible, responsive, and effective team which enables Arrow Global Group to deliver against its strategic objectives by reducing risk associated with information security to an acceptable level. Following the continued evolution of the Group Information Security operating model and increasing requirements to maintain a secure business and IT environment, GIST is seeking a Group Cyber Security Operations Analyst to support and enhance its Cyber Security Operations capabilities. The primary purpose of the role is to support the Confidentiality, Integrity and Availability (CIA) of information processed by Arrow Global and its portfolio companies through the effective operation, monitoring, and continuous improvement of key cyber security controls and services.
Key Responsibilities
- Monitor outputs from security tools and services including the Security Operations Centre (SOC), email security gateways, web security gateways, vulnerability management platforms, cloud security solutions, and other security technologies.
- Review, investigate, and coordinate the remediation of security alerts, incidents, and threats in conjunction with local IT teams and third-party service providers.
- Support the Incident Detection and Response process, ensuring incidents are appropriately investigated, documented, escalated, and resolved.
- Manage and track the end-to-end vulnerability management lifecycle, including vulnerability identification, reporting, remediation tracking, and escalation of overdue findings.
- Coordinate internal and external penetration testing activities and ensure findings are appropriately tracked through to resolution.
- Support the management and continuous improvement of security controls including endpoint protection, email security, web security, identity and access management, cloud security, and code repository security controls.
- Work closely with local IT teams, Cyber Security partners, and third-party service providers to ensure security processes and standards are consistently implemented and maintained.
- Produce regular operational reports, dashboards, and management information relating to cyber security risks, incidents, vulnerabilities, and control effectiveness.
- Maintain awareness of emerging threats, vulnerabilities, attack techniques, Artificial Intelligence (AI) security risks, and industry best practices.
- Produce actionable threat intelligence summaries and recommendations for security and technology teams, drawing on emerging threats, vulnerabilities, and threat actor activity relevant to Arrow Global's operating environment.
- Support the development of new SOC use cases, detection logic, and response procedures to improve security operations maturity.
- Act as a cyber security subject matter expert on projects involving new technologies, security capabilities, mergers, acquisitions, and business integrations.
Skills, Knowledge & Expertise
- Proven experience within a Cyber Security, Information Security, Infrastructure, or IT Operations role.
- Strong understanding of cyber security principles, technologies, and operational processes.
- Experience working with security monitoring platforms, security alerts, incidents, and vulnerability management processes.
- Knowledge of common security technologies including endpoint protection, email security, web security, identity and access management, vulnerability management, cloud security, and security monitoring solutions.
- Hands-on experience administering and supporting security technologies including SIEM, EDR, Secure Email Gateway (SEG), Secure Web Gateway (SWG), CASB, and vulnerability management platforms.
- Experience supporting Microsoft Entra ID security controls, including Conditional Access Policies and identity protection capabilities.
- Experience working with Security Operations Centres (SOC), Managed Security Service Providers (MSSP), or equivalent security service providers.
- Ability to analyse technical information and communicate findings clearly to technical and non-technical stakeholders.
- Effective prioritisation and organisational skills with the ability to manage multiple competing priorities.
- Strong analytical and problem-solving skills.
- Knowledge of cyber threat intelligence concepts, threat actor behaviours, and attack frameworks such as MITRE ATT&CK.
- Understanding of Microsoft 365, Azure, AWS, cloud environments, and associated cyber security risks.
About
Great talent comes in many forms, and we’re committed to building a diverse and inclusive team. Whilst a number of our roles do require specific qualifications and experience, and industry knowledge, we also value potential, unique perspectives, and transferable skills. If you’re excited about this opportunity but don’t meet every requirement, we’d still love to hear from you. We occasionally collaborate with recruitment agencies to fill niche or specialist roles. However, we do not accept agency terms or pay fees for speculative CVs submitted directly to our hiring managers or outside our Applicant Tracking System. If you are a recruitment agency interested in partnering with us for candidate supply, please reach out to [email protected]
Arrow Global Group Manchester, England Office
Belvedere, 12 Booth Street, Manchester, United Kingdom, M2 4AW
Similar Jobs
Fintech • Information Technology • Financial Services
The role involves leading solutions architecture for the Aladdin platform, overseeing delivery of cross-functional initiatives, ensuring alignment with architecture standards, and engaging with stakeholders to translate business requirements into technical designs for scalable solutions.
Top Skills:
AIAladdinAPIsAWSAzureCi/CdDevOpsDistributed SystemsGCPGenaiMicroservices
HR Tech • Information Technology • Professional Services • Sales • Software
Manage and expand an EMEA SMB client portfolio through consultative upselling and cross-selling. Identify expansion opportunities, generate new ARR, manage sales pipelines, forecast accurately, and achieve revenue targets. Use the MEDDPICC framework to navigate complex sales cycles and collaborate with Customer Success, Renewal Managers, and Sales Engineers. Build strong client relationships, understand business needs, and position HR technology solutions through value-led demonstrations.
Top Skills:
Salesforce
Information Technology • Software • Financial Services • Big Data Analytics
As a Quantitative Researcher intern at Citadel, you'll develop models, implement trading strategies, and conduct statistical research in finance.
Top Skills:
C++PythonR
What you need to know about the Manchester Tech Scene
Home to a £5 billion digital ecosystem, including MediaCity, which consists of major players like the BBC, ITV and Ericsson, Manchester is one of the U.K.'s top digital tech hubs, at the forefront of advancements in film, television and emerging sectors like as e-sports, while also fostering a community of professionals dedicated to pushing creative and technological boundaries.
