MLM SEARCH
First Line IT Security Officer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
This is a hands-on, first-line security role for a doer — not a policy-writer or a manager. You will effectively be the operational security function, running vulnerability management, incident response, and day-to-day controls yourself.
There is no SOC and no team beneath you — so we need someone who is genuinely self-sufficient, gets stuck in, and can also talk risk credibly to an ISO 27001-minded leadership team.
What you'll actually do
- Run vulnerability management end to end on Tenable — scanning, triage, risk-based prioritisation (CVE/KEV, severity, business impact) and driving owners to remediate to SLA.
- Own the security incident process — detection, triage, containment, recovery — and escalate to the ISO/2nd line properly.
- Conduct or coordinate regular and ad-hoc security assessments (VAPT) and close the findings.
- Run control-based risk assessments and keep the risk register current — you'll be expected to know the difference between a risk and an issue, and to explain both clearly.
- Implement and maintain security controls in line with the Group NFR Control Catalogue, ISO 27001.
- Support compliance and audit, IAM and access reviews, and security awareness across the business.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Background
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- A hands-on security operator background — you've personally run vulnerability management and worked incidents, not just overseen them.
- Real experience with vulnerability scanners (Tenable ideal; Qualys/Nessus transferable) and endpoint/network monitoring.
- Genuine grasp of IT risk — risk assessment, risk registers, risk vs issue, and how controls map to frameworks (ISO 27001, PCI-DSS, NIST).
- Solid cloud and identity fundamentals (Azure / M365 / Entra ID; AWS or OCI welcome).
- The temperament to work autonomously as the sole first-line resource and communicate risk clearly to non-technical stakeholders.
- Ideally from a regulated / financial-services environment.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location