{"id":661911,"url":"https://alion.io/job/arrowglobal-group-information-security-risk-analyst","title":"Group Information Security Risk Analyst","company":{"id":669091,"name":"Arrow Global","domain":"arrowglobal.net","url":"https://alion.io/company/arrowglobal","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Manchester, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":74000,"max_usd":136000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":36},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false}],"status":"live","first_seen_at":"2026-09-09T21:38:23Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-11-08T21:30:18Z","board_verified":true,"closed_at":null,"days_open":60,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":60},"description":"The Group Information Security Risk Analyst will play a key role within Arrow's Group Information Security Function by maintaining the Information Security Risk Framework, delivering high-quality risk assessments and reporting, engaging with stakeholders to drive remediation activities, and ensuring a proportionate and risk-based approach is applied across a diverse range of business sectors.\nThe role will also support wider Information Security activities including third-party security assurance, due diligence reviews, responses to security questionnaires, audit activities, and security awareness initiatives as required.\nAbout the role\nConduct information security risk assessments across Arrow Global Group and portfolio companies using recognised risk assessment methodologies and frameworks.\nProduce high-quality risk assessment reports, management summaries, and recommendations for both technical and non-technical stakeholders.\nTrack and monitor remediation actions arising from assessments, audits, incidents, and reviews, ensuring timely resolution of identified risks.\nWork closely with stakeholders to ensure recommendations are understood, agreed, and appropriately implemented.\nEscalate significant, overdue, or unresolved information security risks through appropriate governance channels.\nSupport the ongoing development, maintenance, and improvement of the Group Information Security Risk Framework.\nAssess the effectiveness of information security controls and identify opportunities for improvement.\nApply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner.\nLiaise with Cyber Security, IT, Business Continuity, Data Protection, Risk, Compliance, and Internal Audit teams to ensure security requirements are appropriately reflected within assessment activities.\nSupport third-party security assurance activities, including supplier security reviews, due diligence assessments, and ongoing monitoring of third-party risks.\nContribute to governance reporting through the preparation of metrics, risk dashboards, management information, and committee papers.\nMaintain awareness of emerging threats, vulnerabilities, regulatory developments, Artificial Intelligence (AI) risks, and industry best practices.\n\nAbout you\nEducated to degree level in Information Security, Cyber Security, Computer Science, Information Systems, Risk Management, Business Management, or equivalent levels of experience.\nA minimum of 5 years' proven experience within Information Security, Cyber Security, IT Risk, or related disciplines.\nStrong understanding of Information Security Risk Management principles and methodologies.\nExperience conducting risk assessments, control reviews, audits, or assurance activities.\nTechnical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices.\nStrong communicator with positive influencing and interpersonal skills.\nAbility to synthesise complex technical and business information and present findings in a clear and concise manner.\nEffective prioritisation and organisational skills with the ability to manage multiple competing priorities.\nStrong analytical and problem-solving skills.\nExperience producing professional reports and management presentations.\nUnderstanding of cloud technologies and associated information security risks.\nAwareness of Artificial Intelligence (AI), associated risks, governance considerations, and emerging industry developments.","description_format":"text","description_chars":3657,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Asset Management & Funds","Information Security","Debt Collection & Recovery"],"lifecycle":[{"event":"open","at":"2026-09-10T21:38:23Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.557,"p_room":0.35,"age_days":59,"expected_fill_days":18,"reasons":["conf:0","velocity","win:tail"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/arrowglobal-group-information-security-risk-analyst","json_url":"https://alion.io/job/arrowglobal-group-information-security-risk-analyst.json","meta":{"generated_at":"2026-11-08T23:06:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":48101,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":669091},"rest":"https://alion.io/mcp/rest/get_company?id=669091"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Farrowglobal-group-information-security-risk-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Farrowglobal-group-information-security-risk-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Farrowglobal-group-information-security-risk-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/arrowglobal-group-information-security-risk-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Farrowglobal-group-information-security-risk-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":661911}},{"tool":"search_jobs","arguments":{"company":"arrowglobal.net","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":661911},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}