Lead Support Analyst (14439)

Divisional Overview

Business Overview

What We Offer

• We support employee wellbeing by ensuring a sense of purpose and belonging.
• We offer a comprehensive range of wellbeing services which allows employees to get access to the assistance they need at any point in their wellbeing journey.
• Our bespoke benefits support employees and their family’s holistic wellbeing and are inclusive of diverse identities and family structures.

Role Overview

Key Responsibilities

• VM Ops Lead Serving as a backup manager to a VM Operations team of six Primary function will be to onboard and maintain new Nomura Group Entity into current VM Framework Working directly for the IN VM Operations Manager Meeting regularly with New Group Entity CISO Manager as well as Technology Teams Perform and report on all VM and SBC operations deliverables for new Group Entity Maintain new Group Entity VM scan coverage, SBC compliance, console upgrades, control reporting, credential failures, console configuration, scan agents Monthly VM reporting and remediation tracking
• Serving as a backup manager to a VM Operations team of six
• Primary function will be to onboard and maintain new Nomura Group Entity into current VM Framework
• Working directly for the IN VM Operations Manager
• Meeting regularly with New Group Entity CISO Manager as well as Technology Teams
• Perform and report on all VM and SBC operations deliverables for new Group Entity
• Maintain new Group Entity VM scan coverage, SBC compliance, console upgrades, control reporting, credential failures, console configuration, scan agents
• Monthly VM reporting and remediation tracking
• SBC Perform regular security policy scans across all new group entity technologies Analyse scan results, report on security gaps, and collaborate with infrastructure teams to remediate vulnerabilities. Maintain up-to-date knowledge of industry standards (e.g., CIS benchmarks) for virtualization, cloud, and web server environments. Work closely with infrastructure and application teams to ensure SBC compliance Automate scanning and reporting processes to streamline policy enforcement and improve efficiency. Track and report on remediation progress, providing technical support to teams as they address vulnerabilities. Participate in audits, compliance checks, and regulatory reporting related to environment security. Contribute to the continuous improvement of security scanning processes and tools.
• Perform regular security policy scans across all new group entity technologies
• Analyse scan results, report on security gaps, and collaborate with infrastructure teams to remediate vulnerabilities.
• Maintain up-to-date knowledge of industry standards (e.g., CIS benchmarks) for virtualization, cloud, and web server environments.
• Work closely with infrastructure and application teams to ensure SBC compliance
• Automate scanning and reporting processes to streamline policy enforcement and improve efficiency.
• Track and report on remediation progress, providing technical support to teams as they address vulnerabilities.
• Participate in audits, compliance checks, and regulatory reporting related to environment security.
• Contribute to the continuous improvement of security scanning processes and tools.

Required Skills

• Operational and cyber security background
• Small team management background
• Strong communication, delegation, decision making, time management and problem-solving skills
• Basic knowledge of CIS benchmarks for Unix, Windows, Networks, AWS, etc.
• Hands-on experience with vulnerability scanning and compliance tools like Rapid7, Tenable, Qualys, or equivalent.
• Understanding of cloud security principles and virtualization environments.
• Analytical mindset with the ability to interpret scan results and communicate recommendations.
• Strong collaboration and communication skills to work with cross-functional teams.

Preferred Skills

• Experience with automation and scripting (e.g., Python, Bash, PowerShell) to automate scanning tasks.
• Familiarity with any DB scripting language
• Exposure to security in financial institutions or highly regulated industries.
• This role requires an operational security mindset, a collaborative attitude, and a passion for learning. The positions offer the opportunity to grow your skills in the financial industry’s vulnerability management space while contributing to the Nomura’s overall security posture. If you are passionate about cybersecurity, possess strong analytical and reporting skills, and thrive in a collaborative environment, we invite you to apply for this exciting opportunity.
• We are committed to providing equal opportunities throughout employment including in the recruitment, training and development of employees. We prohibit discrimination in the workplace whether on grounds of gender, marital or domestic partnership status, pregnancy, carer’s responsibilities, sexual orientation, gender identity, gender expression, race, color, national or ethnic origins, religious belief, disability or age.
• *Applying for this role does not amount to a job offer or create an obligation on Nomura to provide a job offer. The expression "Nomura" refers to Nomura Services India Private Limited together with its affiliates.
• *The benefits are subject to change and will be in accordance with Company’s policies as may be applicable from time to time).