Enable job alerts via email!

Information Security Analyst

JR United Kingdom

London

Hybrid

GBP 55,000 - 65,000

Full time

12 days ago

Boost your interview chances

Create a job specific, tailored resume for higher success rate.

Join a forward-thinking law firm as an Information Security Analyst and play a pivotal role in a major cyber transformation. In this hybrid position based in Central London, you'll be responsible for maintaining and improving the Information Security Management System (ISMS), ensuring compliance with ISO 27001:2022 across multiple jurisdictions. Your expertise will help in conducting audits, leading remediation efforts, and enhancing security resilience. This is an exciting opportunity to contribute to a strategic cyber investment while enjoying strong UK benefits and a flexible working environment that supports your professional growth.

Strong UK Benefits

Flexible Working

Professional Development Opportunities

Experience in information security or compliance-based roles is essential.
Knowledge of ISO 27001 and similar frameworks is required.

Maintain and improve the ISMS, including policies and procedures.
Conduct internal audits and support third-party reviews.

Information Security

Compliance

Communication

Collaboration

Incident Investigation

Experience in Information Security

Certifications like CISMP, CISSP or ISO 27001 Lead Auditor

ISO 27001

Cyber Essentials

NIST

Microsoft 365

Social network you want to login/join with:

Hybrid (Central London, 3 Days Onsite + Flexible Working) | £55,000–£65,000 + Strong UK Benefits | Strategic Cyber Investment

Be part of a forward-thinking law firm undergoing a major cyber transformation. As an Information Security Analyst, you’ll support governance, lead audits, and build security resilience across multiple jurisdictions.

What You’ll Be Doing

Maintain and improve the ISMS, including policies, procedures, and guidelines
Ensure ongoing ISO 27001:2022 alignment across UK and international offices
Conduct internal audits, lead remediation efforts, and support third-party reviews
Run supplier due diligence and respond to client risk assessments
Investigate and escalate incidents, contributing to ongoing threat awareness
Deliver awareness training and drive adoption of secure behaviours

What You’ll Bring