Information Security Specialist

• Supporting and evolving our Information Security Management System (ISO 27001, Cyber Essentials Plus)
• Identifying and reducing security risks across people, processes and technology
• Investigating and responding to security incidents using a range of security tools
• Applying a root cause analysis approach to help prevent future incidents
• Providing assurance to clients and supporting security questionnaires
• Promoting a strong, firm wide security culture
• Communicating complex security topics clearly to a range of stakeholders
• Keeping up to date with the latest information security threats and vulnerabilities

• Strong understanding of information security principles within a professional services environment
• Good technical awareness and proven experience in a similar role
• Confident stakeholder management skills
• Experience with security frameworks (e.g. ISO 27001)
• Relevant industry-recognised certifications in security, risk management or IT (desirable)
• Strong awareness of the evolving cyber threat landscape, with a genuine interest in all aspects of security
• Ability to translate technical risks into clear, practical advice
• A curious mindset with a passion for continuous improvement

Permanent - Good salary + strong benefits, This role is available for hybrid working with a typical requirement to work 2 or 3 days per week in the Bristol or Edinburgh office. Good salary with strong benefits such as company bonus, PMI, private GP in office, as well as more.

A leading UK Law and Professional Services company is currently looking for an Information Security Specialist to come in and support the existing Information Security Manager to improve and maintain their governance, risk and compliance (GRC) capability and help us continually improve our ISO 27001/CE+ Information Security Management System (ISMS). The role is full-time, with a hybrid working pattern usually around 2/3 days a week in the office in Bristol or Edinburgh., Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C’s, Privacy Policy and Disclaimers which can be found at (url removed)