Security Operations & Risk Analyst (Hybrid)

Canopius; Manchester; Hybrid; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Hybrid working

Competitive base salary

Non-contributory pension

Discretionary bonus

Health & dental cover

Job summary

Canopius is seeking an Information Security Analyst to support security controls across on‑premise and cloud environments in a hybrid Manchester setting. The role works with Technology teams, third‑party providers, and business stakeholders to reduce cyber risk and maintain policy compliance.

You will help monitor SOC/SIEM outputs, participate in risk assessments, and assist with audit responses. Strong communication and a security‑minded mindset are essential for protecting information assets.

Qualifications

• Experience in information security, IT risk, or IT operations.
• Understanding of cybersecurity risks, threats, and control types.
• Familiarity with incident management and assurance activities.
• Ability to analyse information and document findings clearly.
• Strong written and verbal communication skills.
• Experience in regulated or enterprise environments.
• Exposure to cloud security concepts (Azure).
• Experience with security tooling (SIEM, endpoint protection, or vulnerability management).
• Relevant information security education or certifications.

Responsibilities

• Support the day-to-day operation of information security controls and services.
• Monitor security tooling, alerts, and dashboards including SOC/SIEM outputs.
• Investigate and respond to security events and incidents per procedures.
• Escalate incidents and risks to the Information Security Manager as appropriate.
• Perform assurance activities to assess control effectiveness.
• Support gap analysis, compliance readiness, and ongoing monitoring.
• Assist with risk identification, assessment, and documentation.
• Track remediation actions and follow up with control owners.
• Support security incident response activities including investigation and evidence gathering.
• Assist with root cause analysis and lessons learned.
• Contribute to improvements in controls and preventative measures.
• Maintain and operate information security policies, standards, and procedures.
• Provide guidance on security requirements to Technology and business teams.
• Ensure security activities are auditable.
• Support third-party security due diligence, reviews, and assurance activities.
• Assist with responses to audits and regulatory requests.
• Gather and provide evidence to demonstrate effective operation of controls.
• Support security awareness and training activities.
• Promote a positive security culture and clear communications.
• Produce security reports and metrics for technical and non-technical audiences.
• Analyze trends, threats, and emerging risks.
• Contribute ideas to enhance security processes and controls.

Skills

Security operations

Incident response

Risk assessment

Cloud security

SIEM tooling

Endpoint protection

Vulnerability management

Regulatory compliance

Communication skills

Education

Information security certifications

Tools

SIEM systems

Endpoint protection

Vulnerability scanners

Azure security services

Job description

Canopius is seeking an Information Security Analyst to support security controls across on‑premise and cloud environments in a hybrid Manchester setting. The role works with Technology teams, third‑party providers, and business stakeholders to reduce cyber risk and maintain policy compliance.

You will help monitor SOC/SIEM outputs, participate in risk assessments, and assist with audit responses. Strong communication and a security‑minded mindset are essential for protecting information assets.