Senior Information Security Analyst - 12 Month FTC

Osborne Clarke are seeking an experienced Senior Information Security Analyst to join our growing IT department in either our Bristol or London office.
This position will play a crucial role in developing and managing the Information Security Framework across the global firm, ensuring alignment with OC policy, industry best practice, the ISO 27001 standard, SRA guidelines, and Client contractual requirements.

This is a 12 month fixed-term contract position offering hybrid working.

The role

The Senior Information Security Analyst will be a key member of the Information Security Team, deputising for the Information Security Manager and promoting collaboration, team working, and innovation. This role will involve leading the delivery of the Information Security Framework, increasing awareness of Information Security Management through training and communications, and supporting the R&C team, COLP, and COFA in managing risk and security.

Other key responsibilities include:

Information security management framework: Leading the delivery of the Information Security Framework and increasing awareness through training and communications. Supporting R&C team, COLP, and COFA in managing risk and security. Maintaining Information Security risk registers and remediation measures. Maintaining and reviewing the security and compliance regime for ISO 27001.

Information security documentation: Producing risk indicators, monthly reports, and annual management reviews.

Client bids, on-boarding and due diligence: Responding to client Information Security questionnaires and completing scheduled audits by external auditors or clients.

Continuous improvement: Regularly reviewing and auditing measures to meet auditor needs and ensure compliance. Identifying and implementing areas for improvement in risk management.

Supplier management: Ensuring Supplier DDQs are carried out and reviewed. Supporting Risk & Compliance with contract reviews regarding InfoSec clauses.

Ongoing tasks: Updating Audit Plan, Risk Assessment, and associated paperwork. Reporting and metrics on ISMS Performance management. Maintaining Information Security Awareness programmes. Coordinating Global Information Security Policy. Managing internal and external audits. Actively managing personal training and development.

We are looking for

• Outstanding communication skills.
• Experience leading and working in a multi-site, team-oriented environment.
• Lateral thinker and planner with a keen attention to detail.
• Honest, hard-working team player with leadership potential.
• Understanding of the Legal environment and Information Security landscape.
• Qualified as an ISO27001 Lead Auditor or similar.
• Professionally qualified to CISSP/CISM/CISA.
• Understanding of data privacy practices and laws.
• Broad consultancy skills and project management principles.
• Ability to prioritise and execute tasks in a high-pressure environment.
• Experience managing an Information Security Management System in a Legal or Professional Services environment.

Salary and benefits

We offer competitive salaries and generous benefits. We value the health and wellbeing of our people and our wide range of initiatives and benefits support this.

Our recruitment process

We welcome direct applications for our opportunities - if you would like any further information about this role or the firm, we would be delighted to hear from you. Please contact, in complete confidence, Dan Jones (Recruitment Manager) at dan.jones@osborneclarke.com.

Please note that although we include closing dates for our roles as a guide, we review and progress applications on a rolling basis. At Osborne Clarke we do not make any recruitment decisions using automated decision-making.

We are committed to providing an environment where you can perform to the best of your abilities at every stage of your recruitment experience and beyond. If you require any adjustments to be made during the application stage, interview process, or when working with us, please let us know in confidence.

About Us

Osborne Clarke is an international legal practice with over 330 Partners and more than 1,260 talented lawyers in 26 locations*. Our sector-based approach enables us to help our clients tackle the issues they are facing today, and prepare for the ones that they will face tomorrow. Advising them both comprehensively and commercially. We love working closely with our clients on new deals, products and solutions which will transform their businesses, markets and even sectors. And our unique approachable culture is not an added extra, it's fundamental to our success.

At Osborne Clarke we value difference and encourage applicants from all backgrounds. We want everyone to feel that OC is a place where you can be yourself and belong, and our range of interest groups and diversity networks - not to mention our great teams - are a part of making that a reality.

*Services in India are provided by a relationship firm]]>