Data & Information Security Analyst

Working across IT and Compliance, the successful candidate will play a key role in protecting sensitive data and digital assets within a legal sector environment. Responsibilities include monitoring, investigating and responding to security incidents, supporting audits, and maintaining key accreditations such as ISO 27001 and Cyber Essentials. The role involves close collaboration with internal stakeholders and third-party providers.

• Strong knowledge and hands-on experience with ISO 27001:2022
• Minimum of 5 years’ experience in a Data / Information Security role
• Previous experience working within the legal sector is essential
• Proven experience in a similar security-focused role within a law firm or legal services organisation
• Relevant professional certifications such as CISSP, CISM, CompTIA Security+
• Strong knowledge of NIST, UK GDPR, Cyber Essentials / Cyber Essentials Plus
• Practical experience with security tools and technologies including XDR, EDR and SIEM
• Excellent time management skills with the ability to manage competing priorities
• Strong communication skills and the ability to work collaboratively across teams
• A proactive, flexible and service-oriented approach

• Excellent salary
• Attractive benefits package including generous annual leave, pension scheme, hybrid working, private medical cover, life assurance, cycle to work scheme, retail discounts and more