Information Security Analyst

Broster Buchanan; Liverpool; On-site; GBP 40,000 - 60,000; Full time

Job summary

Broster Buchanan is seeking an experienced Information Security Analyst to strengthen security capabilities across governance, risk and compliance while gaining exposure to technical security.

You will work across risk assessments, third-party due diligence, security tooling, and incident response to protect technology and business processes.

Qualifications

• Proven experience in information security, cyber security, security assurance or technology risk.
• Practical experience conducting security risk assessments and reviewing security controls.
• Strong ability to translate technical findings into clear business risks and communicate with stakeholders.
• Knowledge of governance, risk management and security frameworks.

Responsibilities

• Conduct information security risk assessments across technology, applications, projects and business processes.
• Monitor security risks, actions and remediation activity.
• Escalate significant or overdue risks where appropriate.
• Support third-party risk management, supplier due diligence and security assessments.
• Perform security assurance activities and identify opportunities to strengthen controls.
• Produce security reports, dashboards and management information.
• Work closely with Security Operations and IT teams on vulnerability assessments and remediation.
• Support the implementation of security tools and technologies.
• Assist with the management of security events and incidents.
• Support security awareness and training initiatives.
• Maintain and improve information security policies, standards and procedures.
• Act as the Information Security representative for allocated projects and business areas.
• Keep up to date with emerging threats, vulnerabilities and industry developments.

Skills

Information security

Cyber security

Security risk assessment

Governance & risk

Stakeholder communication

Security frameworks

Job description

Are you an experienced Information Security Analyst looking for your next opportunity?

We’re supporting our client with a new vacancy for an experienced Information Security Analyst at an exciting stage of growth. You will join a collaborative team and play a key role in strengthening its security capabilities. This is a great opportunity for someone looking to develop their experience across Governance, Risk & Compliance (GRC)while also gaining exposure to technical security. You'll have knowledge and experience working with recognised security frameworks such as ISO 27001 or NIST.

The Role

You’ll be involved across a broad range of information security activities, including:

• Conducting information security risk assessments across technology, applications, projects and business processes
• Monitoring security risks, actions and remediation activity
• Escalating significant or overdue risks where appropriate
• Supporting third-party risk management, supplier due diligence and security assessments
• Performing security assurance activities and identifying opportunities to strengthen controls
• Producing security reports, dashboards and management information
• Working closely with Security Operations and IT teams on vulnerability assessments and remediation
• Supporting the implementation of security tools and technologies
• Assisting with the management of security events and incidents
• Supporting security awareness and training initiatives
• Maintaining and improving information security policies, standards and procedures
• Acting as the Information Security representative for allocated projects and business areas
• Keeping up to date with emerging threats, vulnerabilities and industry developments

Skills & Experience

• Proven experience in information security, cyber security, security assurance or technology risk
• Practical experience conducting security risk assessments and reviewing security controls
• Experience identifying control weaknesses and supporting assurance activitiesA good understanding of information security governance and risk management
• The ability to translate technical findings into clear business risks
• Experience working with both technical and non-technical stakeholders
• Strong analytical, problem-solving and communication skills
• Excellent organisation and attention to detail
• The ability to manage competing priorities and work independently
• Knowledge of recognised security frameworks such as ISO 27001 or NIST