Senior Information Security Risk Lead (Hybrid)

Medical Protection Society; Leeds; Hybrid; GBP 80,000 - 100,000; Full time

Benefits offered by this job

Discretionary bonus

Pension 11%

Annual leave 25 days

Private medical cover

Car salary sacrifice

Death in service

Wellbeing support

Hybrid working

Inclusive culture

Job summary

Medical Protection Society is seeking a Senior Information Security Risk Analyst in Leeds, hybrid role. You will lead complex risk assessments, design controls, and manage security risks in line with regulatory requirements and risk appetite.

You will mentor junior analysts, shape risk processes, and partner with senior stakeholders to translate technical risk into business outcomes, while ensuring ongoing resilience and security maturity.

Qualifications

• Proven experience in information security risk management, governance, and security assurance within complex or regulated environments.
• Strong knowledge of cyber security risks, controls, cloud technologies, and regulatory frameworks.
• Experience leading security risk assessments across systems, suppliers, projects, and change initiatives.
• Ability to translate complex technical risks into clear, pragmatic business outcomes.
• Excellent stakeholder management, communication, and influencing skills, including engagement with senior leaders.
• Confident working autonomously while contributing to a collaborative, high performing security culture.
• Strong analytical skills, professional judgement, and a proactive approach to risk management.
• Experience mentoring or supporting junior analysts and promoting security best practice.
• Relevant certifications such as CISSP, CISM, CRISC, or ISO 27001 qualifications are desirable.

Responsibilities

• Lead security risk assessments for complex systems, suppliers, projects, and business change initiatives.
• Assess the effectiveness of security controls, identifying gaps and supporting pragmatic risk treatment plans.
• Provide expert security risk guidance for projects, procurement, and supplier onboarding activities.
• Produce clear, high quality risk assessments, treatment plans, exceptions, and management reporting.
• Deliver risk based advice and constructive challenge to technical and business stakeholders.
• Support the continuous improvement of information security risk processes and ways of working.
• Mentor junior analysts, providing guidance and quality assurance to strengthen team capability.
• Support audit, compliance, and assurance activities, ensuring findings are tracked through to resolution.
• Monitor emerging threats, regulatory changes, and compliance requirements, escalating risks where appropriate.

Skills

Security risk management

Governance

Security assurance

Cloud technologies

Regulatory frameworks

Stakeholder management

Communication

Analytical skills

Mentoring

Cyber security

Job description

Medical Protection Society is seeking a Senior Information Security Risk Analyst in Leeds, hybrid role. You will lead complex risk assessments, design controls, and manage security risks in line with regulatory requirements and risk appetite.

You will mentor junior analysts, shape risk processes, and partner with senior stakeholders to translate technical risk into business outcomes, while ensuring ongoing resilience and security maturity.