Information Security Analyst

Information Security Analyst - £40,000 - £55,000 Dependent on Experience - Onsite

Information security analyst required to join a UK leading fintech business based in Liverpool, they are a well known business in their space and growing at an incredible rate.

Key Responsibility:

Support the development, implementation, and ongoing maintenance of the Information Security Management System (ISMS) aligned to ISO 27001

Implement and enforce information security policies, standards, and procedures across the organisation

Conduct security risk assessments, ensuring risks are identified, assessed, and managed through appropriate controls

Maintain and track remediation of vulnerabilities and audit findings

Monitor the threat landscape and coordinate responses to emerging risks and vulnerabilities

Support internal and external audits, including ISO 27001 certification and surveillance activities

Manage third-party and supplier security risk assessments and assurance processes

Work with IT and project teams to ensure security is embedded into system design, development, and change management processes

Deliver and continuously improve the organisation's security awareness and training programme

Ensure compliance with regulatory requirements, including FCA expectations and data protection legislation (GDPR)

Provide regular reporting on security risk, incidents, control effectiveness, and compliance status

Essential Experience

Demonstrable experience in an Information Security or Cyber Security role within a

corporate environment

Strong working knowledge of information security frameworks and standards (e.g. ISO

27001, NIST Cyber Security Framework)

Experience in conducting risk assessments and implementing effective security controls

Hands-on experience in incident response, investigation, and resolution

Experience supporting internal and external audits and compliance activities

Experience managing third-party security risk or supplier assurance processes

Ability to translate technical risks into clear business impact for stakeholders

Strong communication, stakeholder engagement, and organisational skills

Understanding of fundame...