Senior Group InfoSec Risk Analyst

Arrow Global Group; Manchester; On-site; GBP 60,000 - 80,000; Full time

Job summary

Arrow Global Group is seeking a Group Information Security Risk Analyst in Manchester to maintain the risk framework, deliver high-quality risk assessments, and drive remediation activities across the group and portfolio companies.

You will engage with stakeholders to ensure risk-based approaches are applied, produce management summaries, and support governance reporting. The role requires 5+ years in information security and strong knowledge of ISO27001, NIST CSF, and PCI-DSS.

Qualifications

• Educated to degree level in Information Security, Cyber Security, Computer Science, Information Systems, Risk Management, Business Management, or equivalent levels of experience.
• Minimum 5 years' proven experience within Information Security, Cyber Security, IT Risk, or related disciplines.
• Strong understanding of Information Security Risk Management principles and methodologies.
• Experience conducting risk assessments, control reviews, audits, or assurance activities.
• Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS.

Responsibilities

• Conduct information security risk assessments across Arrow Global Group and portfolio companies using recognised risk assessment methodologies and frameworks.
• Produce high-quality risk assessment reports, management summaries, and recommendations for both technical and non-technical stakeholders.
• Track and monitor remediation actions arising from assessments, audits, incidents, and reviews, ensuring timely resolution of identified risks.
• Work closely with stakeholders to ensure recommendations are understood, agreed, and appropriately implemented.
• Escalate significant, overdue, or unresolved information security risks through appropriate governance channels.
• Support the ongoing development, maintenance, and improvement of the Group Information Security Risk Framework.
• Assess the effectiveness of information security controls and identify opportunities for improvement.
• Liaise with Cyber Security, IT, Business Continuity, Data Protection, Risk, Compliance, and Internal Audit teams to ensure security requirements are reflected in assessment activities.
• Support third-party security assurance activities, including supplier security reviews and due diligence assessments.
• Prepare governance reporting through metrics, risk dashboards, management information, and committee papers.

Skills

Information security

Risk assessment

ISO27001

NIST Cybersecurity Framework

PCI-DSS

Cloud security

Education

Bachelor's degree in Information Security

Job description

Arrow Global Group is seeking a Group Information Security Risk Analyst in Manchester to maintain the risk framework, deliver high-quality risk assessments, and drive remediation activities across the group and portfolio companies.

You will engage with stakeholders to ensure risk-based approaches are applied, produce management summaries, and support governance reporting. The role requires 5+ years in information security and strong knowledge of ISO27001, NIST CSF, and PCI-DSS.