Hybrid Associate Product Analyst – Continuous Threat Exposure Management (CTEM)

at Bupa

• Job title: Associate Product Analyst – Continuous Threat Exposure Management (CTEM)
• Job type: Full Time
• Experience level: Junior, Mid level
• Salary: £43,400 - £50,000 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Cyber Security, ServiceNow
• Location requirements: Hybrid, London, United Kingdom

About the role

• Associate Product Analyst enhancing cybersecurity capabilities through security tooling management at Bupa. Collaborating with cross-functional teams to optimize cybersecurity processes and documentation.

Responsibilities

• Gathering and documenting requirements from operational service owners
• Working with Cyber Defence Engineering to design and deliver solutions to meet requirements
• Workload/Backlog management and prioritisation of engineering tasks using agile methodologies
• Toolset lifecycle management, including liaising with procurement for tooling renewals or facilitating Proof of Value (PoV) for new tooling as required within appropriate contractual timescales
• Vendor relationship engagement including working with vendor customer success to ensure best practice use of security tooling
• Assisting in the measurement of value being derived from deployed tooling
• Working with Cyber Technology team to define technology roadmaps, consolidating tooling where appropriate and identifying potential efficiencies
• Striving for best in class use of cyber defence tooling and future capabilities
• Working with operational and engineering colleagues to identify and deploy automation opportunities across Cyber Defence
• Work in partnership with relevant IT Shared services teams to ensure security tooling is deployed within the enterprise environment
• Upkeep of accurate documentation and team processes, including developing Product Governance
• Maintain suitable functional reporting and KPI’s on delivery and improvements

Requirements

• Degree-level education, equivalent training or relevant cybersecurity certifications (e.g., OSCP, CISSP, GCTI, GREM, CEH)
• Workplace experience in cybersecurity, ideally within a regulated environment
• Hands-on experience with tools such as: Qualys, Wiz, AttackIQ (or similar BAS platforms), PlexTrac, BeyondTrust, ServiceNow (security workflows), Recorded Future (or equivalent threat intelligence), BloodHound (or similar rights auditing tools), Jira (or equivalent backlog management), SAI360 (or similar risk management platforms)
• Familiarity with cybersecurity standards and regulations (e.g., NIST CSF, PCI DSS, GDPR, ISO 27001)
• Strong communication skills, with the ability to explain technical issues to non-technical audiences
• High level of discretion and professionalism under pressure
• Self-motivated, able to manage time effectively and make proactive decisions

Benefits

• 25 days holiday, increasing through length of service, with option to buy or sell
• Bupa health insurance as a benefit in kind
• An enhanced pension plan and life insurance
• Onsite gyms or local discounts where no onsite gym available
• Various other benefits and online discounts