Information Security Risk Analyst

Overview

S&W helps clients thrive by simplifying the complex, illuminating new paths, and shaping solutions that make a difference. We are one of the UK’s top 10 fastest-growing accountancy firms, with a trusted history since 1881—helping businesses and individuals meet challenges and seize opportunities across generations.

Built on expertise and driven by ambition, we provide a comprehensive range of services, including tax and accountancy, advisory and assurance, corporate finance, and restructuring. Our purpose is to help navigate challenges, unlock potential, and achieve the extraordinary.

Job Title: Information Security Risk Analyst

We are seeking a talented Information Security Risk Analyst to support the Governance, Risk, and Compliance (GRC) function, managing information security risks across the organisation. This includes maintaining the operational risk register, ensuring ISO 27001 compliance, preparing KPI reporting, and contributing to the continuous improvement of the Information Security Management System (ISMS).

You’ll also play a key part in providing risk oversight during mergers and acquisitions (M&A), to ensure security integration and compliance.

Location and working pattern: This is a permanent role based at either our Birmingham office or Liverpool office with an expected minimum office attendance of 2 days per week. If based in Birmingham, there will be travel to the Liverpool office on an ad hoc basis.

Responsibilities

• Own and maintain the information security risk register and risk treatment tracking
• Perform security risk assessments across systems, processes, and M&A activity
• Support ISO 27001:2022 compliance, audits, and ISMS continual improvement
• Produce risk documentation, KPIs, and management reporting
• Support control testing, assurance, incident reviews, and root cause analysis
• Work with IT, Data Privacy, and delivery teams to embed security and manage risk

Qualifications

Skills and Experience

• Strong knowledge of information security, risk management, and ISO 27001:2022
• Experience managing risk registers, scoring methods, and KPI reporting
• Understanding of M&A activity and associated security risks
• Strong analytical, communication, and stakeholder engagement skills

Desirable

• Relevant degree or equivalent practical experience
• ISO 27001 certification and experience with GRC tools

Additional Information

As a colleague at S&W you will have access to benefits including:

• Competitive salary
• Private medical insurance
• Life assurance
• Pension contribution
• Hybrid working model (role dependent)
• Generous holiday package
• Option to purchase additional holiday
• Shared parental leave
• Fully funded training towards professional qualifications
• Cycle to work scheme
• Season ticket loan
• Eye care support

We are proud to value the differences that a diverse workforce brings, representative of society and our clients. At S&W we have a wide range of employee resource groups and diversity, equity and inclusion initiatives. It is our commitment to provide a workplace where all colleagues feel respected as individuals and can achieve their full potential in a safe, supportive, and inclusive environment.

We are happy to make reasonable adjustments to accommodate your needs throughout the application process. Please let your Recruiter know.

#J-18808-Ljbffr

Salary: GBP 36000 - 60000 per year

Experience: 3 years required