Lead Information Security Analyst

Hovis Bakeries; Liverpool City Region; Hybrid; GBP 45,000 - 55,000; Full time

Job summary

Hovis Bakeries in the United Kingdom seeks a Lead Information Security Analyst to join the GSC Security Team. You will help monitor, report, and manage security risks while embedding security into business processes.

You will collaborate with central security functions to address compliance, oversee patching, and drive security improvements across multiple business units, ensuring incidents are resolved and risk is reduced.

Qualifications

• Knowledge of information and cyber security, risk and compliance.
• Experience in governance, assurance and operational security.
• Familiarity with MFA, PAM, endpoint security and vulnerability management.

Responsibilities

• Develop security roadmaps, risk assessments and mitigation plans.
• Review risks and access controls with regular stakeholder updates.
• Maintain security processes and compliance with standards.
• Coordinate application patching across the business.
• Monitor vulnerabilities and coordinate with system owners.
• Investigate security incidents and indicators of compromise.

Skills

Information security

Cyber security

Risk management

Vulnerability management

Incident response

Identity and access management

Security monitoring

Governance & compliance

Tools

SOC monitoring tools

Cloud security tools

Job description

Career Opportunities: Lead Information Security Analyst (4248)

Requisition ID4248-Posted23/09/2026- Region (1) - Job Category (2) -Permanent-Full Time- Company (1)

Salary: £45,000pa - £55,000pa
Hybrid Working:On average 2 days in the office per week (subject to business requirements)
Permanent

The Lead Security Analyst will join the GSC Security Team, helping to monitor, report, and manage security risks and ensure delivery of the solution or mitigating actions. The purpose of the role is to ensure Security is embedded in the culture of the businesses we support and ensure core security processes and standards are adhered to.

The role includes working closely with our central security function to manage common and wider reaching security and compliance issues. You will also have a level of responsibility for system security processes required to achieve compliance with current business and ABF standards ensuring risks to security are identified, reviewed and resolved. You will also facilitate the delivery of application patching and reporting across a number of business units.

We believe in rewarding our employees and providing a supportive work environment. Here’s what you’ll get:

Key Accountabilities

As the Lead Information Security Analyst you will:

• Help develop security roadmaps, risk assessments and mitigation plans.
• Review security risks and access controls, providing regular stakeholder updates.
• Maintain system security processes and compliance with business standards.
• Coordinate application patching across the business.
• Monitor vulnerabilities and work with system owners to implement appropriate controls.
• Investigate security incidents and potential indicators of compromise referred by the SOC or other sources.
• Work with central teams to strengthen the security of business applications.
• Ensure security is embedded throughout project design and delivery.
• Monitor and analyse security alerts received through tickets, phone calls and other channels.
• Build strong relationships across IS and the wider business, providing security advice and support.
• Improve security processes, controls and awareness across supported businesses.
• Implement and maintain security standards and operating procedures.
• Support the management and development of junior team members through work allocation, mentoring and performance support.
• Contribute to OT security initiatives, including asset visibility, network segmentation, vulnerability management, resilience reviews, site assessments and project security requirements.

The Right Person

We're looking for someone with:

• Strong knowledge of information and cyber security, including risk, vulnerabilities, monitoring, incident response, and identity and access management.
• Experience in an information or cyber security role covering governance, assurance and operational security.
• Knowledge of security controls and technologies, including MFA, Privileged Access Management, endpoint security, vulnerability management, SOC monitoring and cloud security.
• An understanding of Operational Technology security and cyber risk in manufacturing or operational environments.
• Excellent written and verbal communication skills, with the confidence to engage stakeholders at all levels.
• Strong analytical and problem-solving skills, including experience producing reports, risk assessments and process documentation.
• The ability to manage multiple priorities, adapt to change and proactively resolve issues.
• Experience mentoring colleagues and improving security awareness, processes and controls.