Information Security Analyst

Heywood; Altrincham; Hybrid; GBP 42,000 - 62,000; Full time

Job summary

Heywood is seeking a hands-on Information Security Analyst to support the ongoing development of a growing security function. You will work in a small team on day-to-day security operations and help scale processes over time.

You will manage security monitoring, alert triage and vulnerability management using Nessus, coordinating with our external SOC (Rapid7) to investigate and resolve issues promptly.

Qualifications

• Experience in information security, including security operations, vulnerability management or incident response.
• Ability to handle security alerts, assess risk and drive issues to resolution.
• Willingness to learn, take ownership and improve security processes and tooling.

Responsibilities

• Support day-to-day security operations, including monitoring and alert triage.
• Conduct vulnerability management using Nessus and coordinate with the third‑party SOC (Rapid7).
• Assist incident response activities, tracking actions and ensuring follow‑through across the business and partners.
• Contribute to security questionnaires, audits and maintaining security documentation.

Skills

Information security

Security operations

Vulnerability management

Incident response

Security monitoring

Automation mindset

Stakeholder communication

Tools

Nessus

Rapid7

Job description

The role

You have experience working in information security, ideally with exposure to security operations, vulnerability management, or incident response. You are comfortable working with security alerts, understanding risk, and seeing issues through to resolution rather than simply escalating them.

You are organised, reliable, and take ownership of your work. You’re proactive, able to manage asks independently, and focused on seeing things through to completion. You’re equally comfortable working with technical detail but can also communicate clearly with both technical and non-technical stakeholders.

You bring a practical, real – world approach to security and are interested in how it can evolve within a growing organisation. You are motivated by helping mature a security function and are naturally inclined to look for better ways of doing things.

You have an automation mindset and are interested in reducing manual effort through improved processes, repeatable workflows, and better use of tooling. You are comfortable thinking about how tasks can be streamlined or automated rather than simply executed repeatedly.

You are willing to learn, ask questions, and get involved across different areas of security, including tooling, processes, and operational workflows.

Most importantly, you are someone who wants to help build and improve how security operates within a growing organisation, contributing to a more scalable and resilient security capability over time.

This is a hands-on Information Security Analyst role supporting the ongoing development of a growing security function. You’ll be part of a small team, contributing to day-to-day security operations, while also helping to improve and scale them over time.

You will be responsible for supporting core security operations including security monitoring and alert triage, vulnerability management using Nessus, and coordination with our third‑party SOC (Rapid7). You will help ensure security events are appropriately investigated, tracked, and resolved in a consistent and timely manner.

You will also support incident response activity, helping to coordinate actions, track progress, and ensure follow-through across the wider business and external partners.

Alongside operational responsibilities, you will contribute to security assurance activities such as customer security questionnaires, audit support, and maintaining security documentation and processes.

A key part of this role is improving how security operations are delivered. This includes identifying opportunities to reduce manual effort, introducing more efficient workflows, and helping to build repeatable, well‑documented processes. Where appropriate, this may include using tooling capabilities and automation to reduce operational overhead and improve consistency.

This is a role for someone who is comfortable working across multiple areas of security, takes ownership of their work, and is motivated by helping build and improve a security function within a growing organisation.

About us

Heywood combines a passion for software with Agile methodologies to create modern software and data solutions and services for businesses, pension providers and third parties that help transform how their members and customers manage their lifelong financial journeys.

Working for an expanding established market leader, you will have a real voice to influence our evolution. Continued learning and progression is ingrained in our daily life, encouraged through a variety of forums from e‑learning subscriptions and a down‑tools day “Hive Day” and communities of practice for learning and experimentation. Our open culture encourages wide participation and innovation.

We also reward our hard work through regular socials, organised by our people. Socials events include fiercely competitive bake-offs, Pride month office parties, sporting events, games nights and much more!

We are committed to a hybrid working model, combining remote and office‑based working.

EDI statement

As an equal opportunities’ employer, Heywood is committed to the equal treatment of all current and prospective employees and does not condone discrimination on the basis of age, disability, sex, sexual orientation, pregnancy and maternity, race or ethnicity, religion or belief, gender identity, or marriage and civil partnership.

Legal stuff

https://www.heywood.co.uk/privacy-notices#jobapplicantprivacynotice