Information Security Analyst

This is a hands-on Information Security Analyst role supporting the ongoing development of a growing security function. You’ll be part of a small team, contributing to day-to-day security operations, while also helping to improve and scale them over time.

You will be responsible for supporting core security operations including security monitoring and alert triage, vulnerability management using Nessus, and coordination with our third-party SOC (Rapid7). You will help ensure security events are appropriately investigated, tracked, and resolved in a consistent and timely manner.

You will also support incident response activity, helping to coordinate actions, track progress, and ensure follow-through across the wider business and external partners.

Alongside operational responsibilities, you will contribute to security assurance activities such as customer security questionnaires, audit support, and maintaining security documentation and processes.

A key part of this role is improving how security operations are delivered. This includes identifying opportunities to reduce manual effort, introducing more efficient workflows, and helping to build repeatable, well-documented processes. Where appropriate, this may include using tooling capabilities and automation to reduce operational overhead and improve consistency.

This is a role for someone who is comfortable working across multiple areas of security, takes ownership of their work, and is motivated by helping build and improve a security function within a growing organisation.

You have experience working in information security, ideally with exposure to security operations, vulnerability management, or incident response. You are comfortable working with security alerts, understanding risk, and seeing issues through to resolution rather than simply escalating them.

You are organised, reliable, and take ownership of your work. You’re proactive, able to manage asks independently, and focused on seeing things through to completion. You’re equally comfortable working with technical detail but can also communicate clearly with both technical and non-technical stakeholders.

You bring a practical, real - world approach to security and are interested in how it can evolve within a growing organisation. You are motivated by helping mature a security function and are naturally inclined to look for better ways of doing things.

You have an automation mindset and are interested in reducing manual effort through improved processes, repeatable workflows, and better use of tooling. You are comfortable thinking about how tasks can be streamlined or automated rather than simply executed repeatedly.

You are willing to learn, ask questions, and get involved across different areas of security, including tooling, processes, and operational workflows.

Most importantly, you are someone who wants to help build and improve how security operates within a growing organisation, contributing to a more scalable and resilient security capability over time.

Heywood combines a passion for software with Agile methodologies to create modern software and data solutions and services for businesses, pension providers and third parties that help transform how their members and customers manage their lifelong financial journeys.

Working for an expanding established market leader, you will have a real voice to influence our evolution. Continued learning and progression is ingrained in our daily life, encouraged through a variety of forums from e-learning subscriptions and a down-tools day “Hive Day” and communities of practice for learning and experimentation. Our open culture encourages wide participation and innovation.

We also reward our hard work through regular socials, organised by our people. Socials events include fiercely competitive bake-offs, Pride month office parties, sporting events, games nights and much more!

We are committed to a hybrid working model, combining remote and office-based working.