Global Information Security Analyst - Incident & Risk Lead

Bird & Bird; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Bird & Bird is seeking a motivated Information Security Analyst to join its global Information Security Team. You will cover security operations, incident response, governance, risk, compliance, supplier assurance and security project delivery to protect client data and firm assets.

In this role you will collaborate with IT, risk, compliance and legal technologies teams across international projects, contribute to ISMS, and promote a strong security culture, while engaging with external

Qualifications

• Experience in information security, cyber security, or related disciplines.
• Experience investigating security incidents and managing security alerts.
• Strong knowledge of Microsoft 365, Azure/Entra ID and cloud security.
• Experience with vulnerability management programmes.
• Familiarity with security frameworks and standards including: ISO/IEC 27001, Cyber Essentials Plus, NIST Cyber Security Framework, CIS Controls.
• Experience with security tooling such as SIEM, EDR/XDR, vulnerability scanners and email security platforms.
• Experience within a law firm, professional services organisation, financial services firm or other highly regulated environment.
• Experience responding to client security questionnaires and audits.
• Knowledge of Microsoft Security technologies including Defender, Sentinel, Purview and Entra ID.

Responsibilities

• Monitor, investigate and respond to security alerts and incidents across on-premise and cloud environments.
• Lead incident triage, containment, remediation and post-incident reviews to minimise business risk.
• Manage security operations workflows, ensuring issues are prioritised and resolved within agreed SLAs.
• Coordinate vulnerability management activities, driving remediation across infrastructure, applications and cloud services.
• Conduct security assessments, technical reviews and support penetration testing programmes.
• Support and maintain the Information Security Management System (ISMS), including ISO 27001 and Cyber Essentials Plus compliance activities.
• Perform risk assessments and ensure security policies, standards and procedures remain effective and up to date.
• Provide security guidance on new technologies, projects, cloud services and AI adoption initiatives.
• Manage third-party security assurance activities, including supplier assessments, client questionnaires and audits.
• Deliver security awareness training and promote a strong security culture across the organisation.
• Contribute to the continuous improvement of security controls, processes, reporting and strategic security initiatives.

Skills

Information security

Incident response

Microsoft 365 / Azure

Vulnerability management

Security frameworks

SIEM / EDR / XDR

Security governance

Client security questionnaires

Tools

SIEM

EDR/XDR

Vulnerability scanners

Email security platforms

Microsoft Defender

Sentinel

Purview

Entra ID

Job description

Bird & Bird is seeking a motivated Information Security Analyst to join its global Information Security Team. You will cover security operations, incident response, governance, risk, compliance, supplier assurance and security project delivery to protect client data and firm assets.

In this role you will collaborate with IT, risk, compliance and legal technologies teams across international projects, contribute to ISMS, and promote a strong security culture, while engaging with external