Information Security Analyst
Location: Central London (Hybrid)
Join a Leading Law Firm
We are seeking an Information Security Analyst to play a vital role in delivering the firm’s Information Security Management System (ISMS) and achieving compliance with ISO27001 and Cyber Essentials standards. In this role, you will work closely with internal teams and third-party consultants to lead the ISO27001 implementation while ensuring the firm’s systems, networks, and data remain secure against cyber threats.
What You’ll Do
* Support the implementation and ongoing management of the ISMS and security strategy.
* Collaborate with third-party consultants to deliver the ISO27001 implementation for the business.
* Identify and mitigate security risks in partnership with cross-functional teams.
* Develop and deliver engaging security training and awareness initiatives.
* Act as the first point of contact for data protection issues, including potential breaches.
* Maintain up-to-date security policies, procedures, and compliance documentation.
* Manage security incidents and coordinate response activities.
* Assist with internal and external audits, ensuring ongoing compliance with certifications and frameworks.
What You’ll Bring
* Experience: At least 1 year in information security management, governance, or compliance.
* Knowledge: Familiarity with ISO27001, Cyber Essentials, and data protection regulations.
* Skills: Strong ability to assess risks, coordinate compliance efforts, and work effectively with third-party partners.
* Extra Points: Knowledge of incident response, disaster recovery, and maintaining compliance frameworks in regulated environments.
Salary: £45K - £55K
Location: 3 days a week onsite in London
Information Security Analyst