Information Security Analyst

Information Security Analyst - £40,000 - £55,000 Dependent on Experience - Onsite

Information security analyst required to join a UK leading fintech business based in Liverpool, they are a well known business in their space and growing at an incredible rate.

Key Responsibility:

• Support the development, implementation, and ongoing maintenance of the Information Security Management System (ISMS) aligned to ISO 27001
• Implement and enforce information security policies, standards, and procedures across the organisation
• Conduct security risk assessments, ensuring risks are identified, assessed, and managed through appropriate controls
• Maintain and track remediation of vulnerabilities and audit findings
• Monitor the threat landscape and coordinate responses to emerging risks and vulnerabilities
• Support internal and external audits, including ISO 27001 certification and surveillance activities
• Manage third-party and supplier security risk assessments and assurance processes
• Work with IT and project teams to ensure security is embedded into system design, development, and change management processes
• Deliver and continuously improve the organisation's security awareness and training programme
• Ensure compliance with regulatory requirements, including FCA expectations and data protection legislation (GDPR)
• Provide regular reporting on security risk, incidents, control effectiveness, and compliance status

Essential Experience

• Demonstrable experience in an Information Security or Cyber Security role within a
• corporate environment
• Strong working knowledge of information security frameworks and standards (e.g. ISO
• 27001, NIST Cyber Security Framework)
• Experience in conducting risk assessments and implementing effective security controls
• Hands-on experience in incident response, investigation, and resolution
• Experience supporting internal and external audits and compliance activities
• Experience managing third-party security risk or supplier assurance processes
• Ability to translate technical risks into clear business impact for stakeholders
• Strong communication, stakeholder engagement, and organisational skills
• Understanding of fundamentals of IT Infrastructure

Desirable Experience

• Experience working within financial services or regulated environments
• Experience with cloud security (e.g. Azure, AWS)
• Familiarity with SIEM, vulnerability management, and endpoint security tools
• Understanding of data protection and GDPR requirements

If you are looking to join a forward thinking, innovative business this would be a great option! Click Apply!