Information Security Analyst

Foot Anstey; Exeter; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

A leading law firm in the UK is seeking an Information Security Analyst to assist in shaping their Information Security Management System. The role encompasses supporting ISO 27001 certification efforts, creating and maintaining documentation, and conducting risk assessments. Successful candidates should have strong knowledge of information security principles and relevant certifications. This role offers a hybrid working environment in Exeter.

Benefits

Competitive salary and performance-linked bonus

Enhanced parental leave policies

Private healthcare and wellbeing initiatives

Open, flexible working environment

Qualifications

• Experience supporting ISMS implementation or maintenance.
• Strong understanding of frameworks like ISO 27001 and NIST CSF.
• Familiarity with Cyber Essentials Plus.

Responsibilities

• Support the design and implementation of ISMS aligned to ISO 27001.
• Create and maintain security documentation including policies.
• Conduct risk assessments and maintain treatment plans.

Skills

Understanding of information security principles

Excellent documentation skills

Communication skills

Attention to detail

Proactive mindset

Education

ISO 27001 Lead Implementer certification

CISSP certification

CISM certification

Tools

Microsoft 365 Security

Azure AD

Endpoint protection tools

Job description

Information Security Analyst

At Foot Anstey, we’re building something bold — and secure. If you’re looking for a hands‑on role where your structured thinking, documentation skills, and collaborative mindset will help shape our long‑term information security maturity, we’d love to hear from you.

We’re one of the UK’s most forward‑thinking law firms, built on a foundation of innovation, collaboration, and ambition. Join us, and let’s shape the future together.

* We are in a period of exclusive direct sourcing for this role and are not currently accepting applications from recruitment agencies.

The role in 60 seconds

• Role: Information Security Analyst
• Team: IT
• Location: Hybrid working from Bristol, Exeter, Plymouth or Southampton
• Working Pattern: Full time
• Why this role matters: As part of our continued investment in technology and risk, we’re looking for an experienced person to help shape and embed our Information Security Management System (ISMS) as we prepare for ISO 27001 certification.

What you’ll do

You’ll be a key contributor to our Cyber & Information Security team, working across the business to ensure our security policies and processes are not only robust, but practical and well understood. In this role you’ll:

• Support the design and implementation of our ISMS aligned to ISO 27001 and NIST CSF
• Create and maintain security documentation including policies, standards and procedures
• Conduct risk assessments and maintain treatment plans and asset registers
• Gather and manage audit evidence for internal and external reviews
• Support policy rollout and adoption across technical and non‑technical teams
• Assist with third‑party assurance and vendor risk activities
• Collaborate with Cyber Defence and 3rd Line Teams to align technical controls
• Contribute to our security awareness and training programme

What we’re looking for

We’re looking for someone who enjoys structured delivery, takes pride in clear documentation, and thrives in a collaborative environment. You’ll bring:

• A strong understanding of information security principles and frameworks (ISO 27001, NIST CSF, Cyber Essentials Plus)
• Experience supporting ISMS implementation or maintenance
• Excellent documentation and communication skillsFamiliarity with Microsoft 365 Security, Azure AD, and endpoint protection tools
• A methodical approach and attention to detail
• A proactive mindset and commitment to continuous improvement
• Certifications such as CISSP, CISM, or ISO 27001 Lead Implementer are desirable but not essential.

Join a seriously ambitious firm

• An ambitious growth strategy that opens up opportunities for our people to make their mark.
• A client base that spans household names, thriving startups, and ambitious enterprises.
• A culture built on our values of being refreshingly human, entrepreneurial, inclusive and collaborative.
• A strong focus on being a responsible business with a commitment to sustainability and giving back to our communities.
• Comprehensive professional development and training – whatever your role and level we have training that will support you to achieve your goals.

Progressive benefits tailored to you

• Competitive salary and performance‑linked bonus.
• Enhanced parental leave policies.
• Private healthcare and wellbeing initiatives (e.g., mental health support, gym memberships).
• An open, flexible working environment.
• Find out more about our benefits and work environment here Life at Foot Anstey | Foot Anstey

Ready to apply?

• Hit the “Apply Now” button.
• Send us your CV and a quick note on why this role is perfect for you.
• Our team will review your application and be in touch, whatever the outcome.
• Invited for interview?
• With a straightforward process typically involving two interviews, our talent acquisition team will guide you through every step, ensuring you feel confident and prepared to show us what you can do.
• We’re here to support your individual needs. If you require any adaptations or adjustments, we’re more than happy to accommodate these. Before your interview, we’ll contact you to discuss the themes we’ll cover and answer any questions you might have.
• If you’d like to visit our offices prior to your interview or would like help testing your kit for your virtual interview, just let us know.

Let’s make your next career move the start of something extraordinary.