Information Security Analyst

Maxwell Bond; Liverpool; Hybrid; GBP 40,000 - 50,000; Full time

Job summary

A growing UK-based organisation is seeking an Information Security Analyst to join their expanding team. This hybrid role requires expertise in security risk assessments, GRC practices, and policy management. With a commitment to career development, this well-established business in the insurance sector offers numerous benefits, including generous annual leave and enhanced family pay.

Benefits

31–35 days annual leave

Enhanced maternity/paternity pay

Life assurance and pension scheme

Mental health and wellbeing support

Flexible benefits allowance

Qualifications

• 3+ years in Information Security roles with GRC and technical exposure.
• Experience with ISO 27001, NIST, or equivalent frameworks.
• Understanding of risk assessment and vulnerability management processes.

Responsibilities

• Lead security risk assessments and ensure mitigations are tracked.
• Develop and maintain information security policies and procedures.
• Manage third-party risk processes and vendor assurance activities.
• Conduct security architecture reviews and evaluate controls.
• Deliver actionable security metrics to stakeholders.

Skills

Information security expertise

GRC knowledge

Risk assessment

Strong communication skills

Analytical skills

Job description

Information Security Analyst

?North-West based – Hybrid

?£40,000 – £50,000 (DOE) + benefits

?Full-time | Monday to Friday, 9:00 AM – 5:30 PM

A growing UK-based organisation in theinsurance and financial services sectoris looking for aInformation Security Analystto join their expanding Information Security team.

This opportunity offers a hybrid working model and the chance to join a forward-thinking business during a period of transformation. The role blends technical security experience with GRC responsibilities and provides visibility across key areas of the business.

?Key Responsibilities

• Lead security risk assessments and ensure mitigations are tracked and completed.
• Develop, review, and maintain information security policies and procedures.
• Manage third-party risk processes and contribute to vendor assurance activities.
• Align business functions with regulatory and security requirements.
• Oversee vulnerability management efforts in collaboration with IT and SOC teams.
• Conduct security architecture reviews and evaluate controls for improvement.
• Support deployment of new security tools and technologies.
• Provide oversight and documentation for security incidents.
• Deliver actionable security metrics and insights to stakeholders.
• Lead awareness campaigns and contribute to a culture of security.
• Support internal and external audits, representing the security function as needed.
• Stand in for the Head of Information Security in governance and strategy discussions.

?What We’re Looking For

• 3+ years in Information Security roles, with GRC and technical exposure.
• Experience working with ISO 27001, NIST, or equivalent frameworks.
• Understanding of risk assessment and vulnerability management processes.
• Excellent communication and stakeholder engagement skills.
• Strategic mindset and ability to lead and mentor.
• Strong analytical and problem-solving skills.

?The Organisation

This is a well-established business in the insurance space with over four decades of experience. The company is known for its supportive working environment and commitment to career development. With national reach and a focus on specialist insurance products, they are undergoing an exciting period of transformation and digital investment.

?Benefits Snapshot

• 31–35 days annual leave including bank holidays (depending on tenure and grade)
• Enhanced maternity/paternity pay
• Life assurance and pension scheme
• Access to mental health and wellbeing support, including counselling and CBT
• Recognition programmes and long service awards
• Flexible benefits allowance and salary sacrifice options
• Social and engagement initiatives throughout the year

Ready to take on a role where your input shapes future security strategy?

Let’s have a confidential chat to explore this further.