Senior Information Security Analyst

Senior Information Security Analyst at Fieldfisher helps shape and implement the security strategy within a leading European law firm. You will manage risk, vendor risk assessments, and business continuity, working with cross-functional teams to ensure compliance with standards. You’ll partner with the Head of Information Security to develop policies and drive security improvements. This is a role for someone who wants meaningful impact in a resilient, collaborative environment with a strong focus on inclusion.

• generous annual leave
• health insurance
• pension contributions
• life assurance
• season ticket loans
• bike to work loans

• Deputise for the Head of Information Security and support policy development and governance
• Conduct risk assessments and propose mitigations to address vulnerabilities
• Oversee security certifications and regulatory compliance
• Perform vendor risk assessments of third-party providers
• Manage audit findings and coordinate remediation with business units
• Develop and manage business continuity and crisis management plans
• Coordinate with departments to ensure policy adherence
• Provide staff training on security best practices
• Stay informed on industry trends, threats, and technologies

• Professional security management certification (CISSP, CISM, CISA or equivalent)
• Proven experience in a senior information security role, preferably in law firm or professional services
• Experience with ISO27001 and Cyber Essentials Plus or similar standards
• Strong knowledge of information security concepts, risk and vendor risk management, and BCM/CRM

• Excellent problem-solving and decision-making
• Strong communication and leadership skills
• Collaborative and inclusive mindset
• Information security concepts and technologies
• Risk management
• Vendor risk management