> Markdown version of [/jobs/ext/2309708-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/2309708-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** Herbert Smith Freehills LLP
- **Location:** London, UK
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security, Data Security, Information Security Management, Phishing, Information Security Management System, Servicenow
- **Published:** August 30, 2026
- **Apply:** https://www.collegerecruiter.com/job/2815464848-information-security-analyst

## About the Role

* Degree educated (technical degree or similar).
 * We would expect the successful candidate to have around three years\' experience in information security but may consider those with less experience providing they can demonstrate they meet the required competencies.
 * Strong knowledge of ISO 27001 implementation and certification.
 * Power BI analytics and reporting.
 * One or more of the following desired - MSc in security or similar; CISSP; CISA/CISM; ISO 27001 Lead Auditor.
 * Professional Services experience preferable.
 * Adaptable, diligent and works with initiative.
 * Strong relationship builder - internal and external.
 * Familiarity with security tools and systems would be advantageous (e.g., Email DLP, UEBA, phishing simulation).
 * Experience working as part of a global team.

## Description

The individual will work closely with the UK, Australia and US-based teams in the following primary areas of responsibility, focusing on the UK and EMEA offices, * Providing assurance to external stakeholders, including:

 * Supporting the maintenance of the Firms ISO 27001 certification, in particular:
 * Preparing new and existing business units for certification/audit.
 * Collating metrics in support of governance and continual improvement.
 * Risk assessing new ways of working, alongside the Risk and IT teams.
 * Assessing compliance with client-specific security requirements within the legal teams.
 * Managing the ISMS tools, documentation and trackers.
 * Supporting internal security audit activities.
 * Operational Security Oversight
 * Investigate and manage DLP alerts and user behaviour anomalies, escalating as needed.
 * Support incident response for phishing, impersonation scams, and other security events.
 * Assist with API integration projects to enhance security workflows (e.g., ServiceNow integrations).
 * Security Awareness & Education
 * Deliver and monitor phishing simulation campaigns, producing reports and insights.
 * Contribute to security communications and awareness programs across the firm.
 * Strategic Initiatives
 * Participate in onboarding new security technologies such as Data Security Posture Management (DSPM).
 * Engage with AI Risk and Governance discussions to support emerging technology adoption.
 * Stakeholder Collaboration
 * Build strong relationships with IT, Risk, HR, and legal teams to embed security into business processes
 * Provide practical security advice to internal stakeholders.


## Related Videos

- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)
- [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering)
- [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise)

## Related Articles

- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)