Security Operations Lead: Incident Response & ISO 27001

LGBT Jobs; Greater London; Hybrid; GBP 55,000 - 85,000; Full time

Benefits offered by this job

Private medical cover

Life assurance

Critical illness cover

Cycle to work scheme

Online GP appointments

Discounted gym memberships

Electric vehicle scheme

Job summary

Bird & Bird is seeking an Information Security Analyst to join its global Information Security Team. The role covers security operations, incident response, governance, risk management, compliance and supplier assurance, with a focus on protecting client data and information assets.

You will collaborate with IT, risk, compliance and external security providers to enhance the firm's security posture and ISMS, supporting audits and embedding a strong security culture across the organisation.

Qualifications

• Experience in information security, cyber security, security operations or related disciplines.
• Experience investigating security incidents and managing security alerts.
• Good understanding of Microsoft 365, Azure/Entra ID and cloud security principles.
• Experience working with vulnerability management programmes.
• Knowledge of security frameworks and standards including:ISO/IEC 27001NIST Cyber Security Framework
• CIS Controls
• Familiarity with risk assessment methodologies and security governance practices.
• Experience with security tooling such as SIEM, EDR/XDR, vulnerability scanners and email security platforms.
• Experience within a law firm, professional services organisation, financial services firm or other highly regulated environment.
• Experience responding to client security questionnaires and audits.
• Knowledge of Microsoft Security technologies including Defender, Sentinel, Purview and Entra ID.

Responsibilities

• Monitor, investigate and respond to security alerts and incidents across on-premise and cloud environments.
• Lead incident triage, containment, remediation and post-incident reviews to minimise business risk.
• Manage security operations workflows, ensuring issues are prioritised and resolved within agreed SLAs.
• Coordinate vulnerability management activities, driving remediation across infrastructure, applications and cloud services.
• Conduct security assessments, technical reviews and support penetration testing programmes.
• Support and maintain the Information Security Management System (ISMS), including ISO 27001 and Cyber Essentials Plus compliance activities.
• Perform risk assessments and ensure security policies, standards and procedures remain effective and up to date.
• Provide security guidance on new technologies, projects, cloud services and AI adoption initiatives.
• Manage third-party security assurance activities, including supplier assessments, client questionnaires and audits.
• Deliver security awareness training and promote a strong security culture across the organisation.
• Contribute to the continuous improvement of security controls, processes, reporting and strategic security initiatives.

Skills

Information security

Cyber security

Security operations

Microsoft 365

Azure/Entra ID

Vulnerability management

Security frameworks (ISO 27001, NIST,

Security tooling (SIEM, EDR/XDR)

Regulated environments

Security governance

Client security questionnaires

Tools

SIEM tools

EDR/XDR tools

Vulnerability scanners

Microsoft Defender

Microsoft Sentinel

Purview

Entra ID

Job description

Bird & Bird is seeking an Information Security Analyst to join its global Information Security Team. The role covers security operations, incident response, governance, risk management, compliance and supplier assurance, with a focus on protecting client data and information assets.

You will collaborate with IT, risk, compliance and external security providers to enhance the firm's security posture and ISMS, supporting audits and embedding a strong security culture across the organisation.