Security Risk & GRC Analyst - Hybrid (Liverpool)

The Granite Group; Liverpool; Hybrid; GBP 35,000 - 45,000; Full time

Benefits offered by this job

35 days holiday

24/7 mental health support

Hybrid working

Flexible benefits

Recognition awards

Job summary

The Acorn Group is seeking an experienced Information Security Analyst to join our growing Information Security team in Liverpool City Centre with hybrid options. You will perform risk assessments, monitor security risks, and support third-party risk management, controls evaluation, and security tooling across the organisation.

You will collaborate with Security Operations and IT to track remediation, deliver security reports, and promote security awareness.

Qualifications

• Proven experience in information security, cyber security, security assurance, or technology risk.
• Practical experience conducting security risk assessments and reviewing security controls.
• Experience identifying control weaknesses and supporting assurance activities.
• Good understanding of information security governance, risk management, and information handling requirements.
• Ability to analyse technical information and translate findings into business risk.
• Experience working with technical and non-technical stakeholders.

Responsibilities

• Perform Information Security risk assessments across technology, applications, projects and business processes, ensuring mitigations are tracked to completion.
• Analyse and monitor security risks, actions and remediation records.
• Escalate overdue or significant risks to senior members of the Information Security team.
• Perform third-party risk management activities, including supplier due diligence and onboarding security assessment reviews.
• Perform security assurance activities, evaluating controls and recommending improvements.
• Support preparation of information security reports, dashboards and management information.
• Work with Security Operations and IT teams to track the outcome of vulnerability assessments and remediation activities.
• Support the implementation of security tools and technologies.
• Support the Information Security team in the management of security events and incidents.
• Support delivery of the security awareness programme.
• Maintain and improve information security policies, standards and procedures.
• Maintain security documentation, ensuring it remains current, accessible and appropriately controlled.
• Act as the Information Security representative for assigned projects or business areas.
• Stay up to date with the latest network security threats, vulnerabilities and industry trends through continuous learning and training opportunities

Skills

Information Security

Risk assessment

Security governance

Stakeholder communication

Vulnerability management

Job description

The Acorn Group is seeking an experienced Information Security Analyst to join our growing Information Security team in Liverpool City Centre with hybrid options. You will perform risk assessments, monitor security risks, and support third-party risk management, controls evaluation, and security tooling across the organisation.

You will collaborate with Security Operations and IT to track remediation, deliver security reports, and promote security awareness.