Senior Information Security Analyst

DVF Recruitment; England; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Bonus

Full benefits

Job summary

DVF Recruitment is supporting a leading law firm to hire a Senior Information Security Analyst. You will advise on secure AI-enabled business innovation, conduct AI risk assessments, and help maintain the ISO 27001 management system.

The role is hybrid (2–3 days a week in South East England) with a competitive salary plus bonus and full benefits.

Qualifications

• Experience advising on how technology solutions can securely support business innovation.
• Experience conducting risk assessments for new technologies, including AI governance and AI risk.
• Experience managing security & privacy assessments, including DPIAs and privacy reviews.
• Support and maintain an ISO 27001 management system, with interest in ISO 42001.

Responsibilities

• Embed security, privacy, and governance from the outset of AI and innovation projects.
• Lead AI risk assessments and support related governance activities.
• Support ISO 27001 management system and exploration of ISO 42001.
• Contribute to policy development, data classification, information governance, and supplier assurance.

Skills

Information security experience

AI governance & risk

DPIAs / privacy assessments

ISO 27001 / data protection

Education

Information security certifications (CISSP / CISM / CIPP/E / ISO 27001)

Job description

DVF are currently supporting a leading law firm hire a Senior Information Security Analyst to join their Information Security & Data Protection team, acting as the internal security adviser to the firm’s AI and Innovation projects. You’ll embed security, privacy and governance from the outset, lead AI risk assessments and help maintain the firm’s ISO 27001 management system.

Must haves:

• Experience in an Information Security role, advising on how technology solutions can securely support business innovation.
• Conducting risk assessments on new technologies, ideally with exposure to AI governance and AI risk.
• Managing security and privacy assessments, including DPIAs, Transfer Risk Assessments and privacy reviews.
• Supporting an ISO 27001 management system, with an interest in ISO 42001.
• Experience across policy development, data classification, information governance and supplier assurance.
• Information Security and/or Data Protection certifications (e.g. CISSP, CISM, CIPP/E, ISO 27001).

This is a Hybrid role (2 to 3 days a week in their South East England office), paying a competitive salary + bonus & full benefits.