> Markdown version of [/jobs/ext/2729512-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/2729512-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst - **Company:** Bird & Bird - **Location:** London, UK - **Salary:** £52,367.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Artificial Intelligence, Software System Penetration Testing, Microsoft Azure, Law Practice Management Software, Cloud Computing Security, Cyber Security, Microsoft Security Essentials, Cloud Services, Security Information and Event Management, Software Vulnerability Management, Information Security Management System, Cloud Platform System, Information Technology, CIS Benchmarks, Vulnerability Analysis - **Published:** September 5, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5869136686 ## About the Role * Experience in information security, cyber security, security operations or related disciplines. * Experience investigating security incidents and managing security alerts. * Good understanding of Microsoft 365, Azure/Entra ID and cloud security principles. * Experience working with vulnerability management programmes. * Knowledge of security frameworks and standards including: - ISO/IEC 27001 - Cyber Essentials Plus - NIST Cyber Security Framework * CIS Controls * Familiarity with risk assessment methodologies and security governance practices. * Experience with security tooling such as SIEM, EDR/XDR, vulnerability scanners and email security platforms. * Experience within a law firm, professional services organisation, financial services firm or other highly regulated environment. * Experience responding to client security questionnaires and audits. * Knowledge of Microsoft Security technologies including Defender, Sentinel, Purview and Entra ID. ## Description Bird & Bird is seeking a motivated and experienced Information Security Analyst to join its global Information Security Team. This role is ideal for an individual who enjoys a broad range of security responsibilities spanning security operations, incident response, governance, risk management, compliance, supplier assurance and security project delivery. As a member of a small but highly effective global Information Security team, you will play a key role in protecting the confidentiality, integrity and availability of the firm's information assets and client data. The successful candidate will work closely with IT infrastructure, service delivery, legal technology, risk and compliance teams, and external security providers to continuously enhance the firm's security posture. The Information Security team is responsible for maintaining and improving the firm's Information Security Management System (ISMS), ensuring compliance with industry standards, investigating security incidents, supporting audits and promoting a strong security culture across the organisation., * Monitor, investigate and respond to security alerts and incidents across on-premise and cloud environments. * Lead incident triage, containment, remediation and post-incident reviews to minimise business risk. * Manage security operations workflows, ensuring issues are prioritised and resolved within agreed SLAs. * Coordinate vulnerability management activities, driving remediation across infrastructure, applications and cloud services. * Conduct security assessments, technical reviews and support penetration testing programmes. * Support and maintain the Information Security Management System (ISMS), including ISO 27001 and Cyber Essentials Plus compliance activities. * Perform risk assessments and ensure security policies, standards and procedures remain effective and up to date. * Provide security guidance on new technologies, projects, cloud services and AI adoption initiatives. * Manage third-party security assurance activities, including supplier assessments, client questionnaires and audits. * Deliver security awareness training and promote a strong security culture across the organisation. * Contribute to the continuous improvement of security controls, processes, reporting and strategic security initiatives., We provide comprehensive support for our colleagues' health and wellbeing, including private medical cover, life assurance, critical illness cover, and regular health assessments. In addition, we offer a range of lifestyle benefits designed to help our team live their best lives, such as a cycle to work scheme, access to online GP appointments, discounted gym memberships, and an electric vehicle scheme. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)