Information Security Analyst

• Governance, Risk and Compliance - GRC
• ISO27001, NIST
• Information Security Risk assessments

Information Security GRC Analyst - Liverpool (Hybrid)

Are you looking for a company with a strong culture, real career progression, and a people-first approach — all rooted in the heart of Liverpool? Our financial services client has a permanent opportunity within their Information Security Team for an experienced and driven Information Security GRC Analyst to join at an exciting stage of growth. You'll play a key role in strengthening the security capabilities while building your expertise across governance, risk and compliance (GRC) and technical security.

Role

• Perform Information Security risk assessments across technology, applications, projects and business processes, ensuring mitigations are tracked to completion
• Analyse and monitor security risks, actions and remediation records
• Escalate overdue or significant risks to senior members of the Information Security team
• Perform third-party risk management activities, including supplier due diligence and onboarding security assessment reviews
• Perform security assurance activities, evaluating controls and recommending improvements
• Support preparation of information security reports, dashboards and management information
• Work with Security Operations and IT teams to track the outcome of vulnerability assessments and remediation activities
• Support the implementation of security tools and technologies
• Support the Information Security team in the management of security events and incidents
• Support delivery of the security awareness programme
• Maintain and improve information security policies, standards and procedures
• Maintain security documentation, ensuring it remains current, accessible and appropriately controlled
• Act as the Information Security representative for assigned projects or business areas
• Stay up to date with the latest network security threats, vulnerabilities and industry trends through continuous learning and training opportunities

Skills & Experience

• Proven experience in information security, cyber security, security assurance, or technology risk
• Practical experience conducting security risk assessments and reviewing security controls
• Experience identifying control weaknesses and supporting assurance activities
• Good understanding of information security governance, risk management, and information handling requirements
• Ability to analyse technical information and translate findings into business risk
• Experience working with technical and non-technical stakeholders
• Strong analytical, problem-solving, written, and verbal communication skills
• Ability to manage security activities independently and prioritise competing deadlines
• Excellent attention to detail and organisational skills
• Knowledge of information security frameworks such as ISO 27001 or NIST

You will be rewarded with a basic salary plus excellent benefits package.