Information Security Analyst

Overview

As a Senior Information Security Analyst at Fieldfisher, you will help shape and implement the information security strategy in a global professional services environment. You will drive risk management, vendor assessments, and business continuity planning while aligning with ISO27001 and other standards. You’ll collaborate with the Head of Information Security and cross-functional teams to ensure secure operations and regulatory compliance. This role offers the chance to influence security governance in a leading European law firm and to contribute to an inclusive, high-performing culture.

Pay / Benefits

• private medical insurance
• health cash plan
• dental insurance
• life assurance
• critical illness insurance
• matched pension contributions up to 7%

Responsibilities

• Deputise for Head of Information Security and collaborate on policy, standards, and documentation to ensure regulatory compliance
• Conduct risk assessments and propose mitigations for identified vulnerabilities
• Manage security certifications and ensure regulatory compliance across standards
• Perform vendor risk management through security assessments of third-party providers
• Oversee audit findings and coordinate remediations with business units
• Develop and manage business continuity and crisis management plans
• Coordinate policy adherence across departments and provide staff training on security best practices
• Stay updated on industry trends, threats, and security technologies

Key requirements

• Professional security management certification (CISSP, CISM, CISA or equivalent)
• Proven experience in a similar role within a law firm or professional services environment
• Experience with ISO27001 and Cyber Essentials Plus or similar standards
• Strong knowledge of information security concepts, risk and vendor risk management, and business continuity/crisis management
• Excellent problem-solving and decision-making skills
• Strong communication and leadership skills

• communication
• leadership
• problem-solving
• information security concepts and technologies
• risk management
• vendor risk management