Cyber Security Analyst

We are seeking a detail-driven Cyber Security Analyst (GRC) to support our Financial Services organisation in meeting regulatory, client, and certification requirements. The role has a strong emphasis on information security management, business continuity, and client due diligence, ensuring robust controls, clear evidence, and consistent assurance.

You will play a key role in maintaining ISO-aligned management systems, supporting audits, responding and reviewing client security assessments and due diligence requests.

🗓 So, what will your day-to-day look like?

• Support and maintain the Information Security Management System (ISMS) aligned to ISO 27001
• Support Business Continuity and resilience activities aligned to ISO 22301
• Coordinate and support internal and external audits, including surveillance and recertification audits
• Manage and respond to client due diligence questionnaires, security assessments, and assurance requests
• Maintain cyber risk registers, risk treatment plans, and control mappings
• Track remediation actions and ensure timely closure of audit and client findings
• Support vulnerability risk reporting and audit evidence
• Evidence endpoint protection controls
• Demonstrate patching, asset management, and system compliance
• Support device security baselines and compliance reporting
• Maintain and improve security, BC, and resilience policies, standards, and procedures
• Produce clear governance, risk, and compliance reporting for senior stakeholders

👆 Does this sound like you?

Essential

• Experience in a GRC, cyber security, or risk role within Financial Services or a regulated environment
• Hands-on experience supporting ISO 27001 ISMS and audit activities
• Working knowledge of ISO 22301 and business continuity / resilience principles

Desirable

• Experience owning or significantly contributing to ISO certifications
• Familiarity with regulatory requirements
• Certifications such as:
• ISO 27001 Lead Implementer / Lead Auditor
• ISO 22301 Foundation
• CISM, or CompTIA Security+

⌛ The Application Timeline

• A first stage video call with the internal recruitment team (15 minute call)
• A face to face or video call with the hiring manager (45 minutes - 60 minutes)

Typically, the average successful applicant will be within this timeline for 2-3 weeks. Please note we will close this role once we have enough applications for the next stages therefore you should submit your application asap to avoid any disappointment.

If you do not receive a response after 3 weeks of applying, please assume you have been unsuccessful as we may experience a high volume of applications.

🎉 Why you should be EXCITED to apply…

• £40,000 - £45,000 DOE, + up to 20% of your annual salary, paid as a bonus.
• This role is based at our Blackpool office.
• 37.5 hours per week. We offer flexible and hybrid working between our core hours of 8am- 6pm, Monday to Friday.
• The opportunity to complete formal qualifications and learn on the job in a successful, growing organisation.
• And many more benefits to support your wellbeing and professional development.

So, what are you waiting for? Submit your application today.

We’re an equal opportunity employer. All applicants will be considered for employment without attention to age, ethnicity, religion, sex, sexual orientation, gender identity, family or parental status, national origin, or veteran, neurodiversity or disability status.

If you have any questions or suggestions of how we can assist you in your application due to disability or personal reasons, please email recruitment@perchgroup.co.uk.

PLEASE NOTE - All new employees must undergo a full DBS and Credit Check upon acceptance of a job offer with Perch Group.