Hybrid Information Security Analyst - Risk & GRC

Acorn Group; Liverpool; Hybrid; GBP 35,000 - 45,000; Full time

Benefits offered by this job

35 days holiday

Mental health support

Hybrid working

Flexible benefits

Job summary

Acorn Group in Liverpool City Centre is seeking an experienced Information Security Analyst to join its growing Information Security team. You will strengthen security capabilities across governance, risk and compliance and technical security.

The role offers hybrid working, 37.5 hours per week, and a salary up to £35,000-£45,000 depending on experience. You’ll analyse risks, perform third-party reviews and help implement security tools and policies.

Qualifications

• Proven experience in information security, cyber security, security assurance, or technology risk.
• Experience conducting security risk assessments and reviewing security controls.
• Ability to translate technical findings into business risk and communicate with stakeholders.

Responsibilities

• Perform Information Security risk assessments across technology, applications, projects and business processes, ensuring mitigations are tracked to completion.
• Analyse and monitor security risks, actions and remediation records
• Escalate overdue or significant risks to senior members of the Information Security team
• Perform third-party risk management activities, including supplier due diligence and onboarding security assessment reviews
• Perform security assurance activities, evaluating controls and recommending improvements
• Support preparation of information security reports, dashboards and management information
• Work with Security Operations and IT teams to track the outcome of vulnerability assessments and remediation activities
• Support the implementation of security tools and technologies
• Support the Information Security team in the management of security events and incidents
• Support delivery of the security awareness programme
• Maintain and improve information security policies, standards and procedures
• Maintain security documentation, ensuring it remains current, accessible and appropriately controlled
• Act as the Information Security representative for assigned projects or business areas
• Stay up to date with the latest network security threats, vulnerabilities and industry trends through continuous learning and training opportunities

Skills

Information security

Risk assessment

Governance & GRC

Stakeholder management

Vulnerability management

Communication skills

Job description

Acorn Group in Liverpool City Centre is seeking an experienced Information Security Analyst to join its growing Information Security team. You will strengthen security capabilities across governance, risk and compliance and technical security.

The role offers hybrid working, 37.5 hours per week, and a salary up to £35,000-£45,000 depending on experience. You’ll analyse risks, perform third-party reviews and help implement security tools and policies.