Cyber SecOps & Threat Specialist, Law Firm, Bristol

ITS Recruitment Careers; Bristol; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A law firm in Bristol is seeking a Cyber Security and Threat Intelligence Specialist to enhance its cyber threat capabilities. In this hybrid role, you will be pivotal in incident response, strategy development for cyber security technology, and managing compliance with standards like ISO 27001 and GDPR. The ideal candidate will have experience with various security frameworks and tools, ensuring the firm's critical assets are fortified against cyber threats.

Qualifications

• Experience with NIST, CIS, NCSC standards.
• Familiarity with Azure/Defender and security controls.
• Understanding of GDPR and ISO 27001 compliance.

Responsibilities

• Mature incident response and threat intelligence functions.
• Develop strategies for cyber security technology.
• Investigate alerts from monitoring systems.
• Manage supplier relationships and report on compliance.

Skills

Incident response

Threat intelligence

Cyber security technology

Risk management

Job description

Cyber SecOps and Threat Intelligence Specialist, Law Firm, Bristol

We are seeking a Cyber Security and Threat Intelligence Specialist to join an expanding team in this 3,000 user international Law Firm, strengthening its ability to detect, respond to, and prevent cyber threats.

Location: Bristol

Reports to: Head of Cyber Security

Hybrid Role: 3-4 days work from home

The Role

• Play a key role in maturing incident response and threat intelligence functions
• Evolve and mature the firm's capability for detecting and responding to cyber incidents
• Help develop strategies and roadmaps for cyber security technology
• Assist in the research, selection and deployment of new technical security controls for use by the firm
• Provide a point of technical authority and governance for the effective use of technical security controls across the firm
• Act as an escalation point for threat hunting and security incidents
• Investigate alerts from Azure / Defender, IT monitoring systems, and 3rd-party SOC, helping to ensure critical assets remain secure
• Manage supplier relationships, report on control effectiveness, and support compliance with ISO 27001, GDPR, and Cyber Essentials Plus

Technology

NIST, CIS, NCSC, Mitre Att&ck, Security Scorecard, M365 / Azu...