Information Security Analyst - Hybrid, Growth & Impact

The Granite Group; Liverpool; Hybrid; GBP 40,000 - 45,000; Full time

Job summary

A leading insurance provider is seeking an experienced Information Security Analyst to join its growing Information Security Team. The role involves identifying and assessing risks, supporting security policy development, and collaborating with IT teams on vulnerability management. With competitive salary and benefits, this position offers excellent progression opportunities in a supportive, hybrid work environment. Ideal candidates will have 3+ years in information security and strong communication skills to engage with technical and non-technical stakeholders.

Benefits

35 days' holiday with buy/sell options

24/7 mental health support

Professional development opportunities

Flexible benefits

Recognition awards

Qualifications

• Proven experience in risk assessment methodologies.
• Ability to communicate complex security concepts to non-technical stakeholders.
• Familiarity with information security frameworks.

Responsibilities

• Identify and assess risk across the business.
• Support development of security policies and procedures.
• Conduct security audits and vulnerability assessments.

Skills

Risk assessment methodologies

Analytical skills

Problem-solving skills

Communication skills

Knowledge of ISO 27001 or NIST

Understanding of security technologies

Knowledge of vulnerability management

Education

Minimum 3 years' experience in information security roles

Tools

Security tools and technologies

Job description

A leading insurance provider is seeking an experienced Information Security Analyst to join its growing Information Security Team. The role involves identifying and assessing risks, supporting security policy development, and collaborating with IT teams on vulnerability management. With competitive salary and benefits, this position offers excellent progression opportunities in a supportive, hybrid work environment. Ideal candidates will have 3+ years in information security and strong communication skills to engage with technical and non-technical stakeholders.