Information Security Risk Analyst

The Group Information Security Risk Analyst at Arrow Global Group is responsible for maintaining the Information Security Risk Framework, conducting risk assessments, and producing detailed reports for diverse stakeholders. The role involves tracking and managing remediation activities, supporting security assurance processes, and contributing to governance reporting. It requires applying recognised security standards such as ISO27001, NIST, and PCI-DSS in a risk-based manner. Collaboration with relevant teams such as Cyber Security, IT, and Compliance is essential to ensure security requirements are met. The role demands a professional with extensive experience in Information Security and a strong understanding of various security frameworks and emerging threats. The analyst will also maintain awareness of industry developments, including AI risks and regulatory changes, to enhance security practices.