Supports cyber security operations by monitoring security tools, investigating alerts and incidents, managing vulnerabilities, coordinating penetration testing, improving security controls, and producing risk reports. The role also contributes to threat intelligence, SOC detection use cases, incident response procedures, and security projects involving cloud technologies, integrations, and new capabilities.
The Group Information Security Team (GIST) is a central, highly visible, responsive, and effective team which enables Arrow Global Group to deliver against its strategic objectives by reducing risk associated with information security to an acceptable level. Following the continued evolution of the Group Information Security operating model and increasing requirements to maintain a secure business and IT environment, GIST is seeking a Group Cyber Security Operations Analyst to support and enhance its Cyber Security Operations capabilities. The primary purpose of the role is to support the Confidentiality, Integrity and Availability (CIA) of information processed by Arrow Global and its portfolio companies through the effective operation, monitoring, and continuous improvement of key cyber security controls and services.
Key Responsibilities
- Monitor outputs from security tools and services including the Security Operations Centre (SOC), email security gateways, web security gateways, vulnerability management platforms, cloud security solutions, and other security technologies.
- Review, investigate, and coordinate the remediation of security alerts, incidents, and threats in conjunction with local IT teams and third-party service providers.
- Support the Incident Detection and Response process, ensuring incidents are appropriately investigated, documented, escalated, and resolved.
- Manage and track the end-to-end vulnerability management lifecycle, including vulnerability identification, reporting, remediation tracking, and escalation of overdue findings.
- Coordinate internal and external penetration testing activities and ensure findings are appropriately tracked through to resolution.
- Support the management and continuous improvement of security controls including endpoint protection, email security, web security, identity and access management, cloud security, and code repository security controls.
- Work closely with local IT teams, Cyber Security partners, and third-party service providers to ensure security processes and standards are consistently implemented and maintained.
- Produce regular operational reports, dashboards, and management information relating to cyber security risks, incidents, vulnerabilities, and control effectiveness.
- Maintain awareness of emerging threats, vulnerabilities, attack techniques, Artificial Intelligence (AI) security risks, and industry best practices.
- Produce actionable threat intelligence summaries and recommendations for security and technology teams, drawing on emerging threats, vulnerabilities, and threat actor activity relevant to Arrow Global's operating environment.
- Support the development of new SOC use cases, detection logic, and response procedures to improve security operations maturity.
- Act as a cyber security subject matter expert on projects involving new technologies, security capabilities, mergers, acquisitions, and business integrations.
Skills, Knowledge & Expertise
- Proven experience within a Cyber Security, Information Security, Infrastructure, or IT Operations role.
- Strong understanding of cyber security principles, technologies, and operational processes.
- Experience working with security monitoring platforms, security alerts, incidents, and vulnerability management processes.
- Knowledge of common security technologies including endpoint protection, email security, web security, identity and access management, vulnerability management, cloud security, and security monitoring solutions.
- Hands-on experience administering and supporting security technologies including SIEM, EDR, Secure Email Gateway (SEG), Secure Web Gateway (SWG), CASB, and vulnerability management platforms.
- Experience supporting Microsoft Entra ID security controls, including Conditional Access Policies and identity protection capabilities.
- Experience working with Security Operations Centres (SOC), Managed Security Service Providers (MSSP), or equivalent security service providers.
- Ability to analyse technical information and communicate findings clearly to technical and non-technical stakeholders.
- Effective prioritisation and organisational skills with the ability to manage multiple competing priorities.
- Strong analytical and problem-solving skills.
- Knowledge of cyber threat intelligence concepts, threat actor behaviours, and attack frameworks such as MITRE ATT&CK.
- Understanding of Microsoft 365, Azure, AWS, cloud environments, and associated cyber security risks.
About
Great talent comes in many forms, and we’re committed to building a diverse and inclusive team. Whilst a number of our roles do require specific qualifications and experience, and industry knowledge, we also value potential, unique perspectives, and transferable skills. If you’re excited about this opportunity but don’t meet every requirement, we’d still love to hear from you. We occasionally collaborate with recruitment agencies to fill niche or specialist roles. However, we do not accept agency terms or pay fees for speculative CVs submitted directly to our hiring managers or outside our Applicant Tracking System. If you are a recruitment agency interested in partnering with us for candidate supply, please reach out to [email protected]
Arrow Global Group London, England Office
London, United Kingdom
Similar Jobs
.png){kind=logo}
AdTech • Cloud • Digital Media • Information Technology • News + Entertainment • App development
Leads integrated consumer marketing campaigns for Universal theatrical releases in the UK and Ireland. Responsibilities include campaign strategy, creative, media, digital and social execution, audience insights, agency management, budgeting, cross-functional coordination, and performance optimization. Manages two marketing professionals, oversees social and media agencies, collaborates with global and regional teams, and drives innovative initiatives to maximize box office performance and return on investment.
AdTech • Cloud • Digital Media • Information Technology • News + Entertainment • App development
Supports NBCUniversal’s Executive Search Team through interview coordination, candidate and requisition tracking, onboarding, reporting, calendar and travel management, and administrative support. Maintains confidential executive-level data, drafts job postings, coordinates interviews and reimbursements, prepares presentations, and contributes to process optimization, knowledge management, compliance, and special projects. The role requires strong organization, communication, client service, attention to detail, confidentiality, and proficiency with Microsoft Office and internal systems.
Top Skills:
Applicant Tracking SystemContent Management SystemExcelMicrosoft Office SuiteOutlookPowerPointWord
AdTech • Cloud • Digital Media • Information Technology • News + Entertainment • App development
Leads architectural and engineering design coordination for theme park and hospitality projects. Directs internal teams, vendors, stakeholders, and project partners; oversees facility programming, design documentation, drawings, specifications, proposals, vendor selection, scope changes, and project progress. Ensures creative intent, operational requirements, technical quality, cost effectiveness, and readiness for transition to project development teams.
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
