Senior Information Security Governance Analyst

Blue Legal; Southampton; On-site; GBP 65,000 - 90,000; Full time

Job summary

Blue Legal in Southampton seeks an experienced Senior Information Security Governance Analyst to join its Technology team, focusing on AI governance, risk assessments and data protection to safeguard information assets while supporting innovation.

You will contribute to ISO 27001 management, DPIAs, data classification and records governance, and ensure client and supplier assurance meets regulatory requirements.

Responsibilities

• Support AI governance policies, procedures and user guidance.
• Conduct AI risk assessments and provide mitigation recommendations.
• Manage security and privacy reviews, including DPIAs.
• Maintain and develop ISO 27001 management system.
• Contribute to information governance, data classification and records management.
• Support client and supplier assurance activities for information security requirements.

Job description

Blue Legal are seeking an experienced Senior Information Security Governance Analyst to join a Technology team in Southampton, with a specialist focus on Innovation and Projects. This is an exciting opportunity to play a key role in supporting the firm's growing use of artificial intelligence, innovation and emerging technologies, while ensuring information assets remain appropriately protected, managed and governed.

Key Responsibilities

• Support the development and implementation of AI governance policies, procedures and user guidance.
• Conduct AI risk assessments, identifying key risks and providing practical recommendations for mitigation.
• Manage security and privacy assessments, including Data Protection Impact Assessments (DPIAs) and associated reviews.
• Support the ongoing maintenance and development of the firm's ISO 27001 management system, as well as future ISO 42001 requirements.
• Contribute to information governance initiatives, including data classification and records management.
• Support client and supplier assurance activities, ensuring appropriate information security and governance requirements are addressed