Information Security Analyst

About the role

Marco, a leading international insurance group, is expanding its Information Security capability. The Information Security Analyst will help strengthen the group’s security posture across a diverse technology landscape, supporting standards development, threat monitoring and technical guidance.

Key responsibilities

• Identify and assess security risks and vulnerabilities.
• Maintain and update information security policies.
• Monitor compliance with internal and external security requirements.
• Support incident response planning and execution.
• Deliver and monitor security awareness and training programmes.
• Conduct risk assessments for projects and new business initiatives.
• Track and report key risk and performance indicators (KRI/KPI).
• Provide general security guidance across the Group.

Required profile

• Proven experience in the security sector.
• Self‑motivated with a proactive, flexible approach.
• Ability to engage with stakeholders at all organisational levels.
• Strong analytical skills and understanding of Defence‑in‑Depth principles.
• Commitment to staying current with emerging threats and best practices.

Required skills

• Knowledge of NIST Cybersecurity Framework (CSF) and technical controls.
• Familiarity with ISO 27001 framework.
• Experience with data classification and cryptography.
• Understanding of information security processes and risk analysis.

What we offer

• Opportunities for professional development within an international insurance group.
• Hybrid working model (Cheltenham office with occasional travel to London).