Financial Ombudsman Service

The Financial Ombudsman Service is looking for a Senior Vulnerability Management Analyst to lead our end-to-end vulnerability management programme. The ideal candidate will have strong knowledge of vulnerability frameworks, hands-on experience with VM platforms like Qualys, and the ability to communicate effectively with technical and non-technical stakeholders. We offer a hybrid working model, 25 days holiday, a generous pension scheme, and various employer-provided benefits including private medical insurance. Join us to drive our cybersecurity efforts!

Job Overview Financial Ombudsman Service is looking for a Senior Vulnerability Management Analyst to lead our end to end vulnerability management programme. The role is based in London, Cardiff, Manchester, Coventry or Edinburgh and supports a permanent, full time contract (35hours per week). The senior analyst reports to the Information and Cyber Security Lead. Salary: £53,833 - £65,000 (London) or £47,470 - £57,701 (other locations). Responsibilities As the owner of the Vulnerability Management Programme you will: Lead and shape the programme, driving how vulnerabilities are identified, assessed and reduced across the organisation. Work closely with technical and business stakeholders to embed governance, drive accountability and ensure vulnerabilities are prioritised and remediated. Bring structure, insight and clear reporting to the programme, translating complex risk into actionable guidance for technical teams and senior leadership. Lead the use of key vulnerability tools such as Qualys, and shape processes, automation and maturity. Influence decision making and respond to an evolving threat landscape, strengthening our cyber resilience. Minimum Criteria Strong knowledge of vulnerability management frameworks, lifecycle processes and risk based prioritisation. Hands on experience with leading VM platforms (Qualys, Tenable, Rapid7, Microsoft Defender for Cloud). Knowledge of exploitability analysis, CVSS scoring and integration of threat intelligence feeds. Proven experience engaging technical, business and governance teams to drive remediation accountability. Understanding of relevant cybersecurity standards, regulations and frameworks (NIST, SOC2, ISO27001, Cyber Essentials, etc.). Ability to communicate technical concepts to non technical stakeholders, including executives. Strong analytical and problem solving skills, with a keen eye for detail. Excellent written and verbal communication skills, with the ability to produce clear, concise reports. Capacity to manage multiple projects and prioritise tasks effectively. Benefits Hybrid working model - remote, hybrid or in office with a flexible working pattern. 25 days holiday entitlement, with the option to buy or sell days. Generous pension scheme. Family friendly policies, enhanced maternity pay, carers and dependants leave. Employer provided benefits: private medical insurance, virtual GP, critical illness cover, life assurance cover. Voluntary benefits: technology scheme, cycle to work scheme, will writing service, etc. Gym membership discounts and a fully equipped on site gym (London only). Health and wellbeing support including mental health resources. Career development opportunities: courses, mentorship, promotions. Equal Opportunity & Diversity The Financial Ombudsman Service is an equal opportunity employer. All applicants will be treated fairly and in accordance with the law, with no discrimination on the basis of gender, marital status, race, religion, colour, age, disability or sexual orientation. We celebrate diversity, are committed to creating an inclusive environment and are proud to be a Disability Confident Leader. Disabled candidates who meet the minimum criteria will be progressed to the next stage of the process. We welcome applications from under represented groups and encourage applicants to inform us of any reasonable adjustments required.

Cyber Security Officer (Apprentice) Cyber Security Officer (Apprentice) - Contract: 24 month fixed term apprenticeship with transition to a permanent position upon successful completion. Salary: £26,936. Location: London, Exchange Tower. Reporting to: Information and Cyber Security Lead. Working hours: 35 hours per week (full time) with 20% of time on off the job learning. About the role Provide essential operational capacity to manage day to day security workloads, allowing senior analysts to focus on higher level investigations. Responsibilities Investigate complex security incidents and conduct root cause analysis. Deploy and manage security tools, perform vulnerability scans and risk assessments. Act as first responder to escalated security tickets, reviewing automated logs and system activities. Maintain and update security documentation, playbooks, and SOPs. Execute security awareness programmes, phishing simulations and employee training updates. Research and evaluate emerging security technologies and OSINT tools. Stay abreast of cybersecurity news, emerging threats and zero day vulnerabilities to proactively adjust internal defences. Qualifications Minimum of 64 UCAS points, including Maths (acceptable Level 3 qualifications). At least 18 years old on enrolment (September 2026); not in full time education or receiving funding for other learning programmes. Full UK right to work for the duration of the apprenticeship; resident in the UK for 3 years prior to start. Understanding of fundamental networking concepts (TCP/IP, DNS), operating systems, cloud environments and modern threat landscapes. Problem solving and natural investigative skill set with examples of experience. Passion for threat tracking - demonstrate genuine consumption of cybersecurity news outlets, vendor advisory channels and threat intelligence feeds. Benefits £26,936 salary. 25 days holiday entitlement (option to buy or sell). Generous pension. Private medical insurance, virtual GP, critical illness cover and life assurance. Various family friendly policies including enhanced maternity pay and carers leave. Choice of voluntary benefits - technology scheme, cycle to work, will writing, etc. Gym membership discounts and an on site gym open 24/7 in London. Hybrid working - minimum four days in office every fortnight. Extensive personal and career development opportunities. About the Employer The Financial Ombudsman Service is an independent, not for profit organisation committed to resolving disputes between consumers (or small businesses) and financial service providers in the UK. Equal Opportunity Statement The Financial Ombudsman Service is an Equal Opportunity and Disability Confident Employer. All applicants will be treated in a fair and equal manner in accordance with the law, regardless of gender, marital status, race, religion, colour, age, disability or sexual orientation. Application deadline: 15 June 2026. The role may close earlier than the advertised date if required.

The Financial Ombudsman Service is seeking a Cyber Security Officer (Apprentice) for a 24-month apprenticeship, transitioning to a permanent role upon successful completion. Located at Exchange Tower, London, the role focuses on managing security workloads and incident investigations. Applicants should have a minimum of 64 UCAS points with achievements in Maths, an 18+ age requirement, and full UK right to work. Benefits include a salary of £26,936, 25 days holiday, private medical insurance, and a vibrant workplace culture with development opportunities.

The Financial Ombudsman Service is seeking a Network Engineer to join their Infrastructure department focused on maintaining enterprise network systems. You'll be responsible for ensuring stability, performance, and security within a cloud-first environment. This role demands expertise across a range of network technologies and a proactive approach in identifying improvements. Benefits include 25 days of holiday, a generous pension, and health insurance, aligning with their commitment to an inclusive workplace.

Network Engineer Join an independent, not for profit organisation that resolves disputes between consumers, small businesses and financial service providers. The Infrastructure department provides a cloud first foundation for all IT and communication services. As a Network Engineer you will maintain stability and performance of modern enterprise infrastructure and systems. Responsibilities Take ownership of specific network systems and services, ensuring they are maintained throughout their lifecycle and meet defined availability, performance, security and supportability standards. Ensure smooth operation of services while adhering to agreed SLAs, taking accountability for escalated technical issues and delivering sustainable, well understood resolutions. Act as a strong communicator, building effective relationships with stakeholders across technical and non technical teams to understand requirements, expectations and areas for improvement. Work closely with project managers, stakeholders and delivery teams to understand both business and technical requirements, contributing to the successful delivery of network solutions. Take ownership of technical delivery activities, ensuring solutions are implemented in a stable, scalable and supportable manner aligned to organisational standards. Contribute to network design activity, working alongside the architecture team to provide input, feedback and practical implementation considerations. Drive continuous improvement by identifying and implementing changes where services do not meet expected standards, or where opportunities exist to enhance performance, resilience, security or efficiency. Proactively identify, assess and remediate security vulnerabilities across the network estate. Provide technical expertise and guidance, influencing decisions on improvements, standards and future direction of services and technologies. Maintain high quality design, implementation and operational documentation to support ongoing service stability and knowledge sharing. Qualifications Minimum criteria - Experienced network engineer level with evidence of independent ownership of network systems, implementation, operational support and service improvements. Experience supporting enterprise scale network environments of similar complexity, covering both operational and delivery responsibilities. Demonstrable experience of owning technical outcomes, leading delivery across project and service lifecycles, managing implementation activities, resolving complex issues and driving improvements to live services. Experience working across a broad range of network technologies and services, with the ability to adapt and take ownership of multiple disciplines. Proven experience working within a technical team, contributing to day to day operations and change delivery, and managing competing priorities within structured service and change management processes. Strong experience in a stakeholder facing environment, communicating clearly with both technical and non technical stakeholders. Technical Minimum Criteria Hands on experience with Cisco networking technologies (routing, switches, Nexus, Catalyst, SD WAN, wireless, remote access such as Cisco Secure Client/AnyConnect and ASAv). Experience with enterprise cloud networking, ideally within Microsoft Azure IaaS; equivalent experience with other major providers is acceptable. Solid understanding and practical experience of IP routing protocols and data centre network architectures, including OSPF, MP BGP, VXLAN, EVPN, and modern fabric technologies. Experience supporting network security technologies, including firewalls and network access control solutions (e.g. CiscoISE). Experience managing core network services (DNS, NTP, DHCP) as part of maintaining a stable and reliable network environment. Experience with or strong interest in automation and Infrastructure as Code (e.g. Terraform, Bicep, ARM). Benefits 25 days holiday entitlement, with option to buy or sell days. Generous pension. Family friendly policies, including enhanced maternity pay, carers and dependants leave. Employer provided benefits: private medical insurance, virtual GP, critical illness cover, life assurance cover. Choice of voluntary benefits including technology scheme, cycle to work scheme, will writing service, gym membership discounts. Fully equipped on site gym open 24/7 in London only. Equal Opportunity Employer The Financial Ombudsman Service is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all team members. We welcome applications from under represented groups across all communities. The organisation is a Disability Confident Leader and will progress disabled applicants who meet the minimum criteria to the next stage of the process. Reasonable adjustments may be provided upon request.

The Financial Ombudsman Service is seeking a professional to manage security monitoring and response capabilities. The role demands experience in cyber security, especially in operational roles, and requires strong communication skills to convey technical findings to non-technical stakeholders. Benefits include extensive holiday entitlement, pension plans, and family-friendly policies. We are an equal opportunity employer and celebrate diversity within our team.

About Us The Financial Ombudsman Service is an independent, not for profit organisation that helps resolve disputes between consumers, small businesses, and their financial service providers. We play a vital role in UK financial services by providing fair, impartial decisions that are trusted by all parties. What You'll Do You will be responsible for the continual management and improvement of our security monitoring, detection, and response capabilities, protecting our employees, assets, and data, and responding to events that could adversely affect the organisation's reputation or day to day operations. Minimum Criteria Awareness of cyber security frameworks and standards such as NIST, MITRE ATT&CK, and ISO27001 Demonstrable experience working within an Information Security or Cyber Security function, ideally in an operational or SOC aligned analyst role Experience working with, or alongside, a Managed Security Service Provider (MSSP), including reviewing alerts and driving service improvements Hands on experience with SIEM platforms, particularly Microsoft Sentinel Demonstrable experience refining, tuning, or creating detection rules and analytics, including use of KQL or equivalent query languages Experience triaging security alerts, distinguishing false positives from genuine threats, and improving detection quality over time Experience performing end to end security investigations (including sensitive incidents such as brand impersonation or fraud attempts) and identifying root causes using effective analytical techniques Experience with phishing simulation tools and security awareness outcomes What You'll Bring Strong communication skills, with the ability to translate technical findings into clear, actionable insights for non technical stakeholders The ability to prioritise work effectively in a fast paced operational environment, taking ownership of outcomes and continuous improvement Awareness and understanding of cyber security frameworks and standards such as NIST and ISO27001 Benefits 25 days holiday entitlement, with the option to buy extra or sell days Generous pension Various family friendly policies, including enhanced maternity pay, carers and dependants leave Employer provided benefits such as private medical insurance, virtual GP, critical illness cover, life assurance cover Choice of voluntary benefits including technology scheme, cycle to work scheme, will writing service, gym membership discounts, and on site gym 24/7 in London Equal Opportunity The Financial Ombudsman Service is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all team members. We welcome applications from under represented groups across all communities. All applicants will be treated fairly and in accordance with the law, regardless of gender, marital status, race, religion, colour, age, disability or sexual orientation. We are a Disability Confident Leader. Disabled applicants who fulfil the minimum criteria for the role will be progressed to the next stage of the process. Do let us know of any reasonable adjustments you need. Legal This advert may end earlier than the date specified, so please don't delay and apply now. Applicants who determine that their CV or supporting statement was generated using AI tools may be withdrawn from consideration.

The Financial Ombudsman Service is seeking a Senior Business Information Analyst to lead the design and development of Power BI reporting solutions. The role involves collaborating with stakeholders and mentoring junior analysts while promoting best practices in reporting. The ideal candidate will have strong SQL skills and experience with business intelligence software. This position offers the opportunity to work in a hybrid model in London.