Role Purpose
The Cyber Security Engineering Vulnerability & Threat Management (VTM) team are looking for an independent, pro-active, and aspiring individual who is committed to making a meaningful contribution, as a VTM Analyst. They will play a supporting role utilising their technical experience to enhance VTM
solutions that best fit our business requirements. The team are a part of the Cyber Security Engineering function who are developing cyber defence capabilities to protect the business from cyber threats which seek to impact the confidentiality, integrity, and availability of the group.
Report to
Manager, Vulnerability & Threat Management
Direct reports
No direct FTE reports.
May manage contingents and vendor/partner resources in their deliveries.
Key relationships & committees
Stakeholders include the wider security team including security architecture, vulnerability and threat management, cyber strategy business function, governance, risk and compliance, programme management. Entity level Business Information Security Officers (BISOs). Infrastructure & Cloud
operations, engineering, and architecture teams. Internal risk and audit functions. Architecture and corporate approval forums. External partners/vendors,
and industry schemes.
Location / flexible working
Bengaluru – Hybrid Working
Key responsibilities
Contribute to domain strategies and architectures, leads on engineering and the associated artefacts across the areas of vulnerability and threat management.
Be responsible for the controls related to the domain area and ensure they remain effective. Lead and deliver smaller scale projects or discrete work streams for larger projects as part of the cyber programme and other initiatives.
Contribute to the assessment of emerging technologies, including artificial intelligence capabilities, identifying associated security risks and supporting the implementation of appropriate controls and governance measures.
Manage and deliver changes to controls as necessary which are not part of project activity.
Develop key indicators, analysis and artefacts to continually evidence and report control effectiveness and risk for the group.
Critical issue support for any operational incident from operations or global security operations centre for related domain technologies.
Partner with security architecture, engineering and operational teams to assess new solutions and ensure security requirements are incorporated into design, deployment and operational processes.
Accountable for ongoing activities and objectives for the domain area.
Solve complex problems related to the domain area.
Remain current with principles, concepts and emerging technologies related to the role.
Influence vendor roadmaps and functionality in support of LSEG objectives.
Leadership responsibilities
This role is an individual contributor and leads no FTE headcount.
Critical work
Delivery of activities against of agreed cyber security strategies. Shapes project delivery with the project management team and the senior manager of the domain area.
Delivery of key artefacts associated with the role, artefacts support evidencing and assurance activities.
Ongoing control operation and effectiveness and evidencing of such.
Reporting, development and management of agreed measures, key performance indicators and key risk indicators.
Key critical metrics
Delivery of projects and BAU activities within agreed timescales to the required standard.
Issues that are identified are fixed and remain fixed and are not recurring.
Key artefacts for the activities performed exist, are accurate and of required standard.
Agreed measures related to controls owned by the role, for example Key Risk Indicators, are delivered and managed.
Technical / job functional knowledge
Knowledge and experience in the engineering and operation of vulnerability and threat management technologies and the integration with relevant platforms. Level of knowledge in the domain technology area would be…