Information Security Analyst

Information Security Analyst - Liverpool - £60,000 - £65,000 + Bonus + Benefit

We're seeking an Information Security Analyst / Senior Security Analyst to take ownership of the organisation's Information Security Management System (ISMS) and support the ongoing development of our information security governance framework.

This is a hands‑on Information Security role focused on ISO 27001 compliance, risk management, security controls, audit readiness and continuous improvement. The successful candidate will work closely with Technology, Risk and Compliance teams to ensure information security processes remain effective and aligned with business requirements.

This is not an infrastructure management or security operations role.

• Manage and maintain the Information Security Management System (ISMS).
• Support ISO 27001 certification, surveillance and recertification activities.
• Develop, review and maintain information security policies, standards and procedures.
• Conduct information security risk assessments and manage remediation activities.
• Support internal and external audits and ensure audit findings are addressed appropriately.
• Monitor the effectiveness of information security controls and identify improvement opportunities.
• Manage security risk registers and track remediation actions.
• Support information security incident management and lessons learned activities.
• Deliver and maintain information security awareness and training programmes.
• Perform supplier and third‑party security reviews and assessments.
• Work closely with technology teams to ensure security requirements are embedded within systems and projects.
• Produce management reporting relating to information security risks, incidents, compliance and audit outcomes.
• Experience working within an Information Security role.
• Experience managing or maintaining an ISO 27001 aligned ISMS.
• Information security risk assessment experience.
• Experience developing or maintaining security policies and standards.
• Experience supporting internal and external audits.
• Strong understanding of security governance and risk management.
• Ability to communicate security risks to both technical and non‑technical stakeholders.
• Experience working in regulated environments.