Information Security Specialist - Law Firm

Job Responsibilities

• Assist in the maintenance of the firm's information security policies and procedures
• Monitor the firm's networks and systems for security breaches and investigate any incidents
• Investigate reported security incidents
• Work with IT teams to ensure that patching for vulnerabilities is carried out regularly and effectively
• Conduct regular vulnerability assessments and internal penetration testing assessments
• Ensure compliance with industry standards and regulations such as ISO 27001, Cyber Essentials Plus, etc.
• Assist in the management of global InfoSec tools and services

Skills Required

• Relevant InfoSec certifications such as Security+, CISSP, CISA, CEH, CySa+ etc.
• Minimum of 3 years of experience in information security, within a legal or professional services environment
• Knowledge of information security standards and regulations - ISO27001, Cyber Essentials+
• Experience dealing with day-to-day security incidents, projects, monitoring, investigations, and supplier security questionnaires.
• Knowledge of Azure, encryption key management and cloud-based services such as M365
• Additional knowledge of; Business Continuity and Disaster Recovery Planning, Security Incident Response, Secure Development Processes (including OWASP) & Antivirus, Malware, threat hunting techniques and technologies