Senior CyberSecurity Analyst - Vulnerabilities Manager

We’re responsible for Land Transaction Tax and Landfill Disposals Tax. Our work raises revenue to support public services, like the NHS and schools, in communities across Wales. But that’s not all, we're also involved with and support future tax design for Wales.

Join a place with purpose
You’ll join a team of 100+ talented people from across 14 different professions. Our culture is best described as innovative, collaborative and kind. By working together, we’ll deliver a fair tax system for Wales.

Our people
You’ll be working with people from a wide range of backgrounds and experience. From Operations, Policy, Digital and Data, HR, Communications to Finance – there’s a place for you in our friendly team.

You’ll be our greatest asset

You’ll be joining an inclusive organisation and be part of a team where you can thrive, be rewarded and heard.

We’re recognised as one of the top organisations for people engagement in the Civil Service People Survey. Inclusion and fairness are one of our strongest areas, as well as pay and benefits – our People Survey results say it all!

We’re also recognised for being innovative and a digital, ‘cloud-based’ organisation that supports hybrid and flexible working enabling a great work-life balance.

More about working for us, our roles and our Corporate Plan 2025 - 2028 .

You will work closely with senior stakeholders, engineers developers, suppliers and the outsourced SOC to detect, assess and remediate threats, ensuring the organisation maintains a secure and resilient environment.

1. Vulnerability & Threat Management (Lead Area)

• Lead the vulnerability management lifecycle across cloud workloads, endpoints and applications.
• Coordinate and collate vulnerability scanning using relevant tools.
• Work with our outsourced SOC provider to expand authenticated scanning, attack surface discovery and threat‑led prioritisation.
• Analyse scan results, interpret and triage vulnerabilities and threat data, and use these to produce clear remediation guidance tailored to technical and non‑technical stakeholders.
• Horizon-scan for emerging risks and work to ensure WRA is positioned to identify and mitigate those threats.
• Maintain the WRA Vulnerability Management Policy and ensure it remains aligned with emerging risks, changes to compliance frameworks and regulatory changes.

2. Security Monitoring & Incident Response

• Support security operations by reviewing alerts, triaging security events and escalating incidents as required.
• Contribute to first‑line and second‑line incident investigation activities, coordinating with infrastructure engineers and suppliers.
• Curate the collection of threat intelligence sources, adding and removing them as necessary to ensure a wide and deep coverage, and integrate insights into monitoring and detection.

3. Secure Configuration & Operational Security

• Support secure configuration baselines for cloud services, endpoints and network infrastructure (e.g., CIS benchmarks).
• Monitor patch compliance and system hardening across devices, cloud resources and identity platforms.
• Work with IT Operations to ensure services remain secure, patched, resilient and compliant with organisational standards.

4. Governance, Risk & Compliance Support

• Contribute to cyber risk assessments, working with senior colleagues to identify threats, vulnerabilities and control gaps.
• Support audits and assessments aligned to Cyber Essentials Plus and IASME (and potentially other frameworks such as CAF and ISO 27001), including evidence preparation and remediation tracking.
• Provide reporting and metrics that inform the organisation’s cyber risk posture and resilience planning.

5. Stakeholder Engagement & Advisory Duties

• Work collaboratively with stakeholders to embed security considerations into day‑to‑day operations.
• Communicate complex security issues in accessible, practical language to non‑technical colleagues.
• Promote security awareness and contribute to upskilling activities within IT and the wider organisation.

6. Continuous Improvement & Team Development

• Contribute to improving cybersecurity processes, tooling and automation opportunities.
• Participate in knowledge‑sharing activities, retrospectives and capability development across the Digital team.
• Help shape the evolving operating model for cybersecurity as the WRA expands its digital footprint.

Candidate Information Session

If this seems like a role you’d be interested in, join us for our virtual Candidate Information Sessions. You’ll meet the Line Manager, get an overview of the role as well a feeling for what it’s like to work at the WRA. We’ll also talk through our benefits and provide helpful tips for your application with us. Please register for one of the sessions below:

Register here: 1 July 2026 – 12.30-13.00pm https://uwchddadansoddwrseiberddiogelwchseniorcybersecurityanalyst1230.eventbrite.co.uk

Register here: 1 July 2026 – 4.00-4.30pm https://UwchDdadansoddwrSeiberddiogelwchSeniorCyberSecurityAnalyst4pm.eventbrite.co.uk

We recommend you review the job description (or candidate pack) under the 'attachments' section before completing your application

What we offer

• 31 days annual leave + Bank holidays, and 2 Privilege days
• Flexible and hybrid working
• Generous employer pension schemes with a contribution of upto 28.97%
• Tusker car scheme
• Vivup Cycle2Work and advances of salary for season Travel Tickets
• Lifestyle Benefits offering discounts on shopping, restaurants and entertainment
• Wellbeing hour each week
• Access to subsidised sports groups
• Generous family-friendly leave policies
• Free Welsh language courses and time off to learn
• Access to a range of staff diversity networks
• Free counselling and support service via our Vivup Employee Assistance Programme and Your Care Health platform
• A thriving culture that’s described as innovative, collaborative and kind.

Job contact :

• Name : Luke Cox, Yolk Recruitment
• Email : luke.cox@yolkrecruitment.com
• Telephone : 07458 160 673

Recruitment team

• Email : luke.cox@yolkrecruitment.com