Patching & Compliance Analyst

POSITION SUMMARY

Creative ITC is currently looking for a Compliance and Patching Analyst to join the team. The successful candidate will have a proven record of Windows patching, VMware and a high-level view of storage and networks, with a focus on patching multiple systems to defined time frames. They will also be responsible for working with vulnerability scanners and managing tickets for known vulnerabilities

This position is responsible for ensuring the daily functionality of the compliance products, supporting our security posture, and ensuring patching across the estate is done in accordance with standards like CE+, CCM, and ISO27001.

Creative’s Global Multi-Tenanted Cloud Solutions, aaS (meaning as-a-Service) include:

• Support-as-a-Service (SUPaaS)

• Monitoring-as-a-Service (MaaS)

• Patch Management-as-a-Service (PMaaS)

• Security Management (SECaaS)

• Desktop-as-a-Service (DaaS)

• Managed Endpoint

• Infrastructure-as-a-Service (IaaS)

• Networking-as-a-Service (NaaS)

• File-as-a-Service (FaaS)

• Storage-as-a-Service (STaaS)

• Backup-as-a-Service (BaaS)

• Disaster Recovery-as-a-Service (DRaaS)

EDUCATION AND EXPERIENCE

• A good level of working knowledge on Windows environments, more focused on virtual, particularly VMware.

• Experience working with vulnerability tools such as Tenable Nessus and CrowdStrike

• VMware patching and working knowledge. Upgrading vCenter, hosts, VMware tools, etc.

• Desired – experience with storage and upgrading platforms like NetApp.

• An understanding and appreciation of cloud platforms from a holistic view

• An understanding of all layers of the infrastructure stack:

• Compute, storage, networking, virtualisation

• Experience working for a CSP, MSP, or multi-tenanted enterprise is beneficial

• Experience working with incidents, problems, requests and changes within ITSM

KEY JOB ELEMENTS - Responsibilities and Accountabilities

• Patch Deployment: Manage and deploy patches and updates to Windows systems across the organisation.

• Compliance: Ensure compliance with organisational and regulatory security standards.

• Monitoring and Reporting: Monitor the impact of patches on system performance and provide reports on patch management activities.

• Coordination: Collaborate with other IT teams to schedule and coordinate patch deployments

• Troubleshooting: Resolve issues arising from patch deployments and update failures

• Act as a key stakeholder for Business and Service continuity. Ensure risks are assessed, raised, and addressed.

• Actively monitor the PIBU support queues, completing initial incident triage and troubleshooting.

• Keep documentation up to date and accurate.

• Work with the Security & SRE Team Lead and SMEs to ensure SLAs are not breached.

• Empower yourself by working with your peers, taking on responsibility where appropriate.

• Keep up to date with current technology trends.

• Liaise with project management teams to ensure any project participation is on track and actions are accurate.

• Collaborate with customers and other teams via email, phone, virtual and face-to-face meetings as required.

• Take part in and complete, to a satisfactory level, any training requested by the company, including but not limited to Information Security Awareness, Health & Safety Awareness, and Environmental Awareness.

PERSON SPECIFICATION

Articulate and confident

Highly organised

Excellent communicator

Good interpersonal skills and friendly

Commitment to high-quality service delivery

Can-do approach and innovative by nature.

Enthusiastic

Reliable and willing

Efficient

• Great soft skills, desire for cross-skilling and empowerment of peers