- Governance, Risk and Compliance - GRC
- ISO27001, NIST
- Information Security Risk assessments
Information Security GRC Analyst - Liverpool (Hybrid)
Are you looking for a company with a strong culture, real career progression, and a people-first approach — all rooted in the heart of Liverpool?
Our financial services client has a permanent opportunity within their Information Security Team for an experienced and driven Information Security GRC Analyst to join at an exciting stage of growth. You'll play a key role in strengthening the security capabilities while building your expertise across governance, risk and compliance (GRC) and technical security.
Role
- Perform Information Security risk assessments across technology, applications, projects and business processes, ensuring mitigations are tracked to completion
- Analyse and monitor security risks, actions and remediation records
- Escalate overdue or significant risks to senior members of the Information Security team
- Perform third-party risk management activities, including supplier due diligence and onboarding security assessment reviews
- Perform security assurance activities, evaluating controls and recommending improvements
- Support preparation of information security reports, dashboards and management information
- Work with Security Operations and IT teams to track the outcome of vulnerability assessments and remediation activities
- Support the implementation of security tools and technologies
- Support the Information Security team in the management of security events and incidents
- Support delivery of the security awareness programme
- Maintain and improve information security policies, standards and procedures
- Maintain security documentation, ensuring it remains current, accessible and appropriately controlled
- Act as the Information Security representative for assigned projects or business areas
- Stay up to date with the latest network security threats, vulnerabilities and industry trends through continuous learning and training opportunities
Skills & Experience
- Proven experience in information security, cyber security, security assurance, or technology risk
- Practical experience conducting security risk assessments and reviewing security controls
- Experience identifying control weaknesses and supporting assurance activities
- Good understanding of information security governance, risk management, and information handling requirements
- Ability to analyse technical information and translate findings into business risk
- Experience working with technical and non-technical stakeholders
- Strong analytical, problem-solving, written, and verbal communication skills
- Ability to manage security activities independently and prioritise competing deadlines
- Excellent attention to detail and organisational skills
- Knowledge of information security frameworks such as ISO 27001 or NIST
You will be rewarded with a basic salary plus excellent benefits package.
Information Security Analyst in Liverpool employer: Broster Buchanan Careers
Broster Buchanan offers an exceptional work environment for an Azure Infrastructure Engineer, providing the opportunity to be part of a global automotive brand during a transformative period. With a hybrid work model based in vibrant central Birmingham, employees benefit from a competitive salary, a comprehensive benefits package, and a culture that fosters collaboration and professional growth through exciting new projects. Join a team where your expertise will be valued, and your contributions will directly impact the future of the company's IT infrastructure.
