Information Security Analyst

The Acorn Group is looking for an experienced and driven Information Security Analyst to join us at an exciting stage of our growth. As part of our supportive, collaborative Information Security team, you’ll play a key role in strengthening our security capabilities while building your expertise across governance, risk and compliance (GRC) and technical security. Job Title: Information Security Analyst Location: Liverpool City Centre, Hybrid working available Working Hours: Monday to Friday, 37.5 hours per week Salary: up to £35,000- £45,000 depending on experience What you will be doing: Perform Information Security risk assessments across technology, applications, projects and business processes, ensuring mitigations are tracked to completion Analyse and monitor security risks, actions and remediation records Escalate overdue or significant risks to senior members of the Information Security team Perform third-party risk management activities, including supplier due diligence and onboarding security assessment reviews Perform security assurance activities, evaluating controls and recommending improvements Support preparation of information security reports, dashboards and management information Work with Security Operations and IT teams to track the outcome of vulnerability assessments and remediation activities Support the implementation of security tools and technologies Support the Information Security team in the management of security events and incidents Support delivery of the security awareness programme Maintain and improve information security policies, standards and procedures Maintain security documentation, ensuring it remains current, accessible and appropriately controlled Act as the Information Security representative for assigned projects or business areas Stay up to date with the latest network security threats, vulnerabilities and industry trends through continuous learning and training opportunities What we are looking for: Proven experience in information security, cyber security, security assurance, or technology risk Practical experience conducting security risk assessments and reviewing security controls Experience identifying control weaknesses and supporting assurance activities Good understanding of information security governance, risk management, and information handling requirements Ability to analyse technical information and translate findings into business risk Experience working with technical and non-technical stakeholders Strong analytical, problem-solving, written, and verbal communication skills Ability to manage security activities independently and prioritise competing deadlines Excellent attention to detail and organisational skills Knowledge of information security frameworks such as ISO 27001 or NIST Why Join Us? Competitive Salary