> Markdown version of [/jobs/ext/2064597-information-security-assistant](https://www.wearedevelopers.com/jobs/ext/2064597-information-security-assistant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Assistant

- **Company:** Bevan Brittan
- **Location:** Bristol, UK
- **Contract:** Permanent contract
- **Skills:** Microsoft Word, Microsoft Excel, Microsoft Outlook, Cyber Security, Databases, Document Management Systems, Disaster Recovery, Microsoft Sharepoint Designer, Microsoft Visio, Microsoft Software, Microsoft PowerPoint, Working Model 2D, Data Logging, Information Technology, ISO-14001
- **Published:** August 15, 2026
- **Apply:** https://www.careerjet.co.uk/job/gb2ffc432ad77bd937b2f373eaab564657/eaa

## About the Role

* A careful, methodical approach with excellent attention to detail and strong personal organisation to ensure that issues are followed through and closed out.
 * The ability to prioritise work (and reprioritise where urgent issues arise), deliver to pace and to deadlines,
 * The ability to work independently and on their own initiative, being ambitious for improvement across the firm, but mindful of, & subject to the priorities set by the Director of Risk and the wider firm strategy.
 * Ability to develop and build upon strong relationships with key stakeholders within the firm
 * Excellent written and verbal communication skills.
 * The ability to identify improvements to working practices within the R&BP team so as to maximise efficiency.
 * Ability to take ownership of tasks and manage own workload to meet deadlines, identifying any risks to agreed deadlines and addressing these proactively.
 * Ability to deliver work of a high quality, whilst ensuring that time allocated to particular tasks is proportionate.
 * Proactive, self-motivated and flexible approach.
 * In dealings with external third parties, being an effective ambassador and advocate for the firm, its culture and values.

Whilst not a requirement, the following would also be an advantage:

 * Relevant experience of working in a business involved in the provision of legal services
 * Experience in ISO management systems and accreditations and/or Lexcel
 * Familiarity with Microsoft applications (Outlook, Word, Excel, PowerPoint, SharePoint Designer and Visio).
 * Good working understanding of IT systems (including document management systems such as FileSite/iManage, finance systems such as 3E, case management systems such as MatterSphere, online training systems such as VinciWorks, and cloud-based content-sharing sites such as HighQ Collaborate).
 * Awareness of the key principles of GDPR, Information Security, Business Continuity and Quality Management

## Description

Supported by our valued business services professionals, our award-winning and growing legal teams provide almost 2,000 organisations with commercial, corporate, property, finance, regulatory, employment and litigation (commercial and clinical negligence) legal and advisory services.
As a responsible business, we embrace four values: Relationships, Reputation, Responsible and Results. These give us a sense of purpose. They influence the decisions we make and how we work with each other. Importantly, they motivate us to deliver meaningful outcomes for our clients and the communities that we're part of.
Consistently recognised as one of The Times Best Law Firms and highly ranked across the legal directories, we are proud of our hard-earned reputation. Our 2025/26 financial results confirmed both revenue and profit growth for a thirteenth consecutive year, ensuring our ability to continue investing in our people.
Looking to the future, we're targeting ambitious growth and success. And we're looking for the best people to be part of it.
Join a team of experts and progressive thinkers
The successful candidate will join Bevan Brittan's growing Risk & Best Practice (R&BP) team. Whilst the team is based in Bristol, suitable candidates based in the Birmingham or Leeds areas would also be considered. The team is responsible for operating, maintaining and monitoring the firm's Management System (ISO 9001, ISO 27001, ISO 22301 and ISO 14001), ensuring firm-wide compliance with legal and regulatory requirements and promoting Best Practice within the firm and by third parties working with the firm.
Current R&BP team members include:

 * Director of Risk : A board member and head of the R&BP team, has overall responsibility for Best Practice, Information Security and Environmental Management at strategic level.
 * R&BP Solicitors: Provide a front-line risk and regulatory advice service to the firm, and the firm's management.
 * Information Security Manager (CISM) : Oversees the day-to-day operation and maintenance of the firm's Management System (ISO 9001, ISO 27001 and ISO 14001), plus the firm's Cyber Security and Business Continuity/Disaster Recovery (BC/DR) improvement programmes.
 * R&BP Assistants : Provide administrative support to the R&BP team, including the logging of information security and data protection incidents, and assisting the R&BP Solicitor and CISM with the management of the firm's internal and external audit programmes.
 * Due Diligence Officers : Support solicitors with the onboarding of new clients, including compliance with our obligations under the Money Laundering Regulations

The role
As the firm's ISO management system continues to evolve, the Information Security Assistant will support the SISM and contribute to the team by carrying out the following key tasks:
Supporting the Senior Information Security Manager (SISM):

 * Maintenance of the firm's ISO Management System, including preparing for our annual ISO audits, setting up interviews with audit participants, and dealing with invoicing and other administrative aspects associated with the audits, (including following up and closing out agreed audit actions)
 * Collating information for and completion of Information Security (InfoSec) and Cyber Security (CyberSec) questionnaires received from clients.
 * Rolling out InfoSec/CyberSec training across the firm and ensuring completion of outstanding training
 * Contributing to InfoSec//CyberSec related change projects, and handling day-to-day queries
 * Coordinating meetings of internal stakeholders to drive improvements in compliance in InfoSec and CyberSec policies, processes and procedures and address specific InfoSec/CyberSec issues.
 * Assisting with the annual update of the firm's Risk Register
 * Assisting with the testing of Business Continuity plans, and Business Impact Assessment (BIA) across the firm and assisting with the roll out of the Business Continuity Survey.
 * Undertaking such other duties as may be required within the general scope of the role

General Risk & Best Practice Support

 * Providing support to the R&BP lawyers and the wider team on infosec and cybersec issues and queries, data breach incidents and data subject access requests.
 * Preparing and publishing intranet news items for the R&BP teamDealing with emails and calls relating to client queries and complaints.
 * Preparing and publishing intranet news items for the R&BP team.
 * Updating R&BP team policies and guidance on the Know How database, and updating relevant links on the intranet
 * Creation of new internal approval processes using HighQ Collaborate., When we ask colleagues what makes Bevan Brittan a great place to work, the most popular thing they say is "the people". The overwhelming consensus is that we make time for each other. We welcome questions and support each other. Naturally, we look for new colleagues who align with our values.
Supported to be your best
Hybrid working
We operate a hybrid working model based on the needs of our clients, teams and people. Our core business hours are 9am - 5:15pm Monday to Friday, but we're open to our people working more flexibly around those times and welcome a conversation with you if you have any questions about this. We try to offer you the flexibility to work your week in a way that suits you.
Learning, Development & Progression
We're committed to supporting your professional and personal development needs.This means that we offer a range of tailored training courses and you will have lots of opportunity to learn from those around you. We actively encourage progression and this is reflected in our annual review and promotion processes. You will be supported by your line manager to achieve your full potential.
Wellbeing
As a Bevan Brittan employee, you'll have access to a variety of services that support your wellbeing. We've pledged our commitment to The Mindful Business Charter and lots of our people contribute to our Wellbeing Responsible Business strand, which organises an annual calendar of wellbeing events and initiatives.


## Related Videos

- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync)

## Related Articles

- [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Guide for Expats Living in the UK](https://www.wearedevelopers.com/magazine/355-guide-for-expats-living-in-the-uk)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)