Hybrid Information Security Analyst | Risk & Compliance

Granite Group Wholesalers LLC; Liverpool; Hybrid; GBP 35,000 - 45,000; Full time

Benefits offered by this job

35 days holiday

24/7 mental health support

Hybrid working options

Recognition awards

Career progression opportunities

Flexible benefits

Job summary

Acorn Insurance, part of the Acorn Group, invites applications for an Information Security Analyst in Liverpool City Centre with hybrid working. You will perform risk assessments, monitor security risks, and support third‑party risk management to strengthen the organisation’s security posture.

The role requires knowledge of information security frameworks (ISO 27001/NIST), strong analytical skills, and the ability to translate technical findings into business risk.

Qualifications

• Proven experience in information security, cyber security, security assurance, or technology risk.
• Practical experience conducting security risk assessments and reviewing security controls.
• Experience identifying control weaknesses and supporting assurance activities.
• Good understanding of information security governance, risk management, and information handling requirements.
• Ability to analyse technical information and translate findings into business risk.

Responsibilities

• Perform Information Security risk assessments across technology, applications, projects and business processes, ensuring mitigations are tracked to completion.
• Analyse and monitor security risks, actions and remediation records.
• Escalate overdue or significant risks to senior members of the Information Security team.
• Perform third-party risk management activities, including supplier due diligence and onboarding security assessment reviews.
• Perform security assurance activities, evaluating controls and recommending improvements.
• Support preparation of information security reports, dashboards and management information.
• Work with Security Operations and IT teams to track the outcome of vulnerability assessments and remediation activities.
• Support the implementation of security tools and technologies.
• Support the Information Security team in the management of security events and incidents.
• Support delivery of the security awareness programme.
• Maintain and improve information security policies, standards and procedures.
• Maintain security documentation, ensuring it remains current, accessible and appropriately controlled.
• Act as the Information Security representative for assigned projects or business areas.
• Stay up to date with the latest network security threats, vulnerabilities and industry trends through continuous learning and training opportunities

Skills

Security risk assessment

Governance & risk management

Communication skills

Stakeholder management

Analytical thinking

Vulnerability tracking

Education

Information security certifications (e.g., CISSP/CISM)

Job description

Acorn Insurance, part of the Acorn Group, invites applications for an Information Security Analyst in Liverpool City Centre with hybrid working. You will perform risk assessments, monitor security risks, and support third‑party risk management to strengthen the organisation’s security posture.

The role requires knowledge of information security frameworks (ISO 27001/NIST), strong analytical skills, and the ability to translate technical findings into business risk.