Information Security Risk Analyst

The Group Information Security Risk Analyst is responsible for maintaining the risk framework, conducting assessments, and producing reports for various stakeholders. They track remediation actions, support framework improvements, and apply recognised standards such as ISO27001 and NIST. The role involves liaising with different security teams to ensure assessment activities are comprehensive and aligned with best practices. They support third-party security reviews and contribute to governance reporting with metrics and dashboards. The candidate must demonstrate expertise in security frameworks, risk management, and technical controls, with a focus on emerging threats like AI risks. Effective communication, organisation, and analytical skills are essential for managing multiple priorities in this critical security role.