Senior AI risk & Information Security Analyst

Morgan Hunt; England; On-site; GBP 70,000 - 110,000; Full time

Job summary

Morgan Hunt is recruiting on behalf of a global offshore law firm client for a Senior AI & Information Security Analyst. The role provides information security governance and risk leadership across AI and technology projects, ensuring security in the project lifecycle and governance controls.

You will work with business, technology and external vendors, assess AI-enabled solutions including Copilot, and help embed security into change initiatives.

Qualifications

• Experience in Information Security, Security Governance, Security Assurance or Technology Risk.
• Experience conducting security or technology risk assessments.
• Understanding of information security governance, risk management and security controls.
• Experience supporting technology projects, business change or project-based initiatives.
• Ability to interpret security risks and provide practical recommendations.
• Knowledge of ISO 27001; awareness of ISO 42001 is advantageous.

Responsibilities

• Act as the Information Security SME across AI and innovation initiatives.
• Provide information security guidance throughout assessment, selection and implementation of AI-enabled technologies.
• Support the secure adoption of technologies including Microsoft Copilot and other AI platforms.
• Assess information security, privacy and governance risks associated with AI solutions and emerging technologies.
• Identify, document and manage risks associated with proposed technologies and solutions.
• Support the development and implementation of appropriate governance controls for AI-related initiatives.
• Maintain awareness of developments in AI security, governance and related standards.
• Conduct information security and technology risk assessments.
• Support security assurance activities across projects and programmes.
• Review proposed solutions and provide recommendations regarding security controls and risk mitigation.
• Support the development, maintenance and review of information security policies, standards and procedures.
• Assist with activities relating to ISO 27001 and alignment with emerging AI governance standards such as ISO 42001.
• Contribute to information governance, privacy and data protection activities where required.
• Support the management and communication of information security risks across projects.
• Partner with business, technology and innovation teams to embed security considerations into projects.
• Provide clear and practical security guidance to both technical and non-technical stakeholders.
• Work with third-party suppliers and technology vendors during assessment and implementation activities.
• Engage with stakeholders across multiple offices and jurisdictions.
• Build strong working relationships to support the delivery of business and technology change initiatives.
• Support additional information security projects and programmes across the business.
• Contribute to broader information security objectives and initiatives as programme priorities evolve.

Skills

Information Security

Governance & Risk

Security Assurance

AI Governance

Stakeholder Engagement

Project Delivery

Education

CISSP

CISM

Job description

Senior AI & Information Security Analyst

The Opportunity

Our global offshore law firm client is investing in a range of AI, innovation and technology initiatives designed to support both legal service delivery and business operations. As part of this programme, they are seeking a Senior AI & Information Security Analyst to provide information security, governance and risk expertise across AI and technology projects. The successful candidate will act as the dedicated Information Security lead aligned to the AI & Innovation Programme, helping the business assess, implement and govern emerging technologies in a secure and controlled manner. The role will work closely with project teams, business stakeholders and technology functions to ensure security requirements are appropriately considered throughout the project lifecycle. While the initial focus will be on AI and innovation initiatives, the role will also support wider information security projects and programmes across the business.

Key Responsibilities

AI & Innovation

• Act as the Information Security SME across AI and innovation initiatives.
• Provide information security guidance throughout the assessment, selection and implementation of AI-enabled technologies.
• Support the secure adoption of technologies including Microsoft Copilot and other AI platforms.
• Assess information security, privacy and governance risks associated with AI solutions and emerging technologies.
• Identify, document and manage risks associated with proposed technologies and solutions.
• Support the development and implementation of appropriate governance controls for AI-related initiatives.
• Maintain awareness of developments in AI security, governance and related standards.

Information Security Governance & Risk

• Conduct information security and technology risk assessments.
• Support security assurance activities across projects and programmes.
• Review proposed solutions and provide recommendations regarding security controls and risk mitigation.
• Support the development, maintenance and review of information security policies, standards and procedures.
• Assist with activities relating to ISO 27001 and alignment with emerging AI governance standards such as ISO 42001.
• Contribute to information governance, privacy and data protection activities where required.
• Support the management and communication of information security risks across projects.

Stakeholder Engagement

• Partner with business, technology and innovation teams to embed security considerations into projects.
• Provide clear and practical security guidance to both technical and non-technical stakeholders.
• Work with third-party suppliers and technology vendors during assessment and implementation activities.
• Engage with stakeholders across multiple offices and jurisdictions.
• Build strong working relationships to support the delivery of business and technology change initiatives.

Wider Information Security Activities

• Support additional information security projects and programmes across the business.
• Contribute to broader information security objectives and initiatives as programme priorities evolve.

Skills & Experience

Essential

• Experience within Information Security, Security Governance, Security Assurance, Technology Risk or a related discipline.
• Experience conducting security or technology risk assessments.
• Understanding of information security governance, risk management and security controls.
• Experience supporting technology, business change or project-based initiatives.
• Ability to interpret security risks and provide practical recommendations.
• Experience working with a range of technical and non-technical stakeholders.
• Strong analytical, organisational and problem-solving skills.
• Ability to work independently and manage multiple priorities.
• Pragmatic approach to balancing security requirements with business objectives.

Desirable

• Experience supporting AI, innovation or emerging technology initiatives.
• Understanding of AI governance, AI risk and responsible AI concepts.
• Knowledge of ISO 27001.
• Awareness of ISO 42001.
• Experience within legal, professional services, financial services or other information-sensitive environments.
• Exposure to common enterprise and SaaS-based technologies.
• Experience supporting privacy, information governance or data protection activities.

Certifications

• CISSP
• CISM
• Other relevant Information Security certifications

What Success Looks Like

The successful candidate will combine information security expertise with governance and risk management capabilities. They will be comfortable operating across business and technology teams, supporting the secure adoption of AI and other technologies while providing practical, risk-based security guidance. This role is suited to someone who can bridge:

• Information Security
• Technology Risk
• Security Governance
• Security Assurance
• AI Governance
• Stakeholder Management
• Project and Change Delivery

and who is capable of supporting a fast-moving portfolio of AI, innovation and wider technology initiatives.

Desired Skills and Experience

Skills & Experience

Experience in Information Security, Security Governance, Security Assurance or Technology Risk.

Strong understanding of information security risk management and security controls.

Experience conducting security or technology risk assessments.

Exposure to AI governance, AI risk or emerging technologies.

Ability to provide practical security advice to both technical and non-technical stakeholders.

Experience supporting technology projects, digital transformation or business change initiatives.

Knowledge of ISO 27001; awareness of ISO 42001 is advantageous.

Experience with supplier/vendor security reviews, information governance, privacy or data protection is beneficial.

Strong communication, stakeholder management and problem-solving skills.

Relevant certifications such as CISSP, CISM or equivalent are advantageous.