Information Security Specialist

Talantir; Greater London; On-site; GBP 72,000 - 88,000; Full time

Job summary

A global law firm in central London is seeking an Information Security Assurance Specialist to strengthen security controls across systems, projects and processes.

Reporting to the Information Security Manager, you will determine when assurance testing is needed, oversee third-party testers, and drive remediation or risk acceptance while helping evolve the ISMS.

Qualifications

• Proven background in information security within regulated or ISO-aligned organisations.
• Practical understanding of ISO 27001 and Cyber Essentials Plus.
• Strong ownership orientation with ability to manage multiple priorities.

Responsibilities

• Define and coordinate security assurance activity across the technology estate, including security testing of new and changing systems prior to production release.
• Regular testing of core platforms and infrastructure.
• Non-technical assurance exercises such as physical security assessments and social engineering scenarios.
• Review and assess testing outcomes with technical specialists, rank issues by business risk, and track remediation to completion.
• Partner with IT architecture and delivery teams to review designs and ensure security controls are considered early in the lifecycle.
• Evaluate security implications of technical changes and represent information security in governance forums.

Skills

Information security

ISO 27001

Cyber Essentials Plus

Stakeholder engagement

Job description

A global law firm is seeking an Information Security Assurance Specialist to support and enhance the firm’s security and risk assurance capabilities. £80,000 per annum3 days onsite per week in central London.

Working closely with the Information Security Manager, this role will focus on assessing the effectiveness of security controls across systems, projects, and operational processes. You will determine when assurance testing is required, engage specialist third-party providers to deliver testing, and oversee findings through to remediation or risk acceptance. The role also plays a key part in supporting technology change by reviewing solution designs, identifying security requirements, and advising on risk associated with system changes.

Key Responsibilities

• Define and coordinate security assurance activity across the technology estate, including:
• Security testing of new and changing systems prior to production release
• Regular testing of core platforms and infrastructure
• Non-technical assurance exercises such as physical security assessments and social engineering scenarios
• Review and assess testing outcomes alongside technical specialists, rank issues based on business risk, and track remediation to completion
• Partner with IT architecture and delivery teams to review technical designs and ensure security controls are incorporated early in the solution lifecycle
• Evaluate security implications of technical changes and represent information security at governance forums, including change advisory boards
• Contribute to the ongoing development and standardisation of assurance practices by defining testing expectations and reusable security requirements
• Support the maintenance and evolution of the firm’s ISMS, including documentation, reporting, and compliance support activities

About You

• Proven background in information security, regulated or ISO-aligned organisation
• Practical understanding of ISO 27001 and Cyber Essentials Plus
• Proactive, accountable, and comfortable taking ownership of security outcomes
• Strong organisational skills with the ability to manage multiple priorities
• Curious by nature, with an interest in improving controls, processes, and approaches
• Confident engaging with technical specialists, suppliers, and senior business stakeholders