{"id":2930907,"url":"https://alion.io/job/lancashire-group-principal-cyber-security-analyst","title":"Principal Cyber Security Analyst","company":{"id":679472,"name":"Lancashire Group","domain":"lancashiregroup.com","url":"https://alion.io/company/lancashiregroup","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":94000,"max_usd":167000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":28},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false}],"status":"closed","first_seen_at":"2026-10-19T14:38:22Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-11-04T02:57:02Z","board_verified":false,"closed_at":"2026-11-04T02:57:02Z","days_open":15,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":15},"description":"Purpose\nInformation security is critical to maintaining Lancashire’s operational resilience, regulatory compliance and protection of Group assets.\nReporting to the Head of Cyber Security & Risk, the Principal Information Security Analyst is responsible for the day-to-day delivery and continuous improvement of the information security function, with a primary focus on technical assurance, control validation and cyber risk management.\nThe role acts as the primary technical subject matter expert within a flat team structure, leading complex assurance activities, providing technical challenge across business and technology initiatives, and supporting high-quality risk and assurance outcomes. The role works collaboratively with the Senior Information Security Analyst to embed technical assurance into day-to-day delivery activities and strengthen overall security capability across the team.\nThe role supports the Head of Cyber Security & Risk, working collaboratively with other Information Security team members to provide technical expertise and challenge across risk and assurance activities, while supporting the development of Information Security Analysts through knowledge sharing and involvement in complex assurance work.\nSpecific Responsibilities\nLead and contribute to the delivery and continuous improvement of the Information Security Management System (ISMS), ensuring alignment with regulatory requirements and recognised frameworks (e.g. NIST CSF, NYDFS, ISO 27001).\nTranslate strategic direction into operational assurance activities, ensuring effective tracking, governance and reporting of security activities, control performance and key risk indicators.\nOwn the day-to-day management of cyber risk, including maintenance of the risk register and oversight of remediation activities.\nUndertake and drive cyber risk and control assessments across business operations, change initiatives and third parties.\nDeliver technical assurance activities, including control testing, validation and evidence gathering, ensuring outputs are robust, consistent and defensible.\nManage and coordinate responses to internal and external audit findings, ensuring timely and effective remediation.\nSupport regulatory reporting and maintain appropriate documentation and evidence to demonstrate compliance.\nAct as the primary technical subject matter expert, providing guidance and challenge across IT infrastructure, applications, cloud and third-party environments.\nProvide technical validation and challenge through governance forums (e.g. CAB), ensuring security implications of changes are understood and addressed.\nAssess and challenge new systems, services and application onboarding to ensure compliance with security standards and control requirements.\nDevelop and apply threat modelling and technical assurance approaches to support secure design and risk identification.\nProvide challenge and input into third-party security assurance activities where required, ensuring third-party risks are appropriately assessed and managed.\nSupport response and investigation of cyber security incidents through technical analysis and control validation, contributing to effective response and continuous improvement.\nWork with the SOC provider to support the effectiveness of monitoring, detection and response controls.\nProvide technical guidance and knowledge sharing to support team capability and development.\nEssential Skills & Requirements\nSolid experience in an Information Security role, with experience operating at a senior or specialist level. \nStrong hands-on experience in cyber risk management, control assessment and assurance delivery. \nDemonstrable experience in technical security assurance across infrastructure, applications and cloud environments. \nStrong working knowledge of recognised frameworks such as NIST CSF and ISO 27001. \nExperience supporting regulatory compliance obligations (e.g. FCA, PRA, NYDFS or equivalent). \nExperience supporting audit activities and remediation tracking. \nExperience in third-party risk and supplier assurance processes. \nAbility to interpret and apply technical security controls in practical environments. \nExperience supporting or mentoring team members in technical and assurance activities. \nStrong analytical, organisational and stakeholder communication skills.\nStrong organisational and coordination skills. \nStrong analytical and problem-solving capability. \nAbility to provide effective technical challenge and oversight. \nCollaborative working style and team-oriented mindset. \nAbility to translate strategy into operational delivery and assurance\nProactive, delivery-focused and continuous improvement mindset.\nAbility to support, guide, and mentor team members.\nThe Lancashire Way\nAt Lancashire, we believe our culture sets us apart. The way we behave and approach our work day-to-day is what makes us unique and creates a positive experience for our people, business partners and other stakeholders. Honesty and integrity in all we do is a given and The Lancashire Way reflects our true character and spirit.\nStraight-talking\n We feel empowered to share thoughts and ideas, because everyone’s voice matters.\nCollaborative\n We work together towards common goals, share knowledge and support each other.\nHard-working\n We all have a stake in the company’s success and are proactive in contributing to our goals and vision.\nResponsible\n We focus on achieving tangible results with consistent standards across the Group.\n Positive\n We engage with brokers, clients, communities, stakeholders and colleagues professionally and passionately as proud ambassadors of Lancashire.","description_format":"text","description_chars":5647,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Property & Casualty Insurance","Information Security","Reinsurance"],"lifecycle":[{"event":"open","at":"2026-10-20T14:38:22Z"},{"event":"close","at":"2026-11-04T02:57:02Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/lancashire-group-principal-cyber-security-analyst","json_url":"https://alion.io/job/lancashire-group-principal-cyber-security-analyst.json","meta":{"generated_at":"2026-11-05T13:18:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17151,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":679472},"rest":"https://alion.io/mcp/rest/get_company?id=679472"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flancashire-group-principal-cyber-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flancashire-group-principal-cyber-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flancashire-group-principal-cyber-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lancashire-group-principal-cyber-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flancashire-group-principal-cyber-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2930907}},{"tool":"search_jobs","arguments":{"company":"lancashiregroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2930907},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}