Information Security Analyst

Job DescriptionInformation Security Analyst - Governance and ComplianceInformation Security Analyst - Governance and Compliance - required by 700 user City Law Firm.Reporting to the Head of InfoSec you will be responsible for supporting the governance, risk and compliance activities of the department, and ensuring security culture and processes are embedded across the firm. The role will include helping the firm maintain ISO270001 accreditation and compliance with other standards.Other key responsibilities of the Information Security Analyst will include;Maintaining ISMS related policies and proceduresDevelopment and enhancement of InfoSec Policies, Procedures and relevant standards, and supporting documentationResponding to client tender requests and client audit processesVendor Assurance - reviewing and assessing vendors against established tools/benchmarksWorking to help the firm maintain ISO27001 and PCI certificationsProvide an escalation path for information security issues, incidents and enquiriesCoordinate the production of relevant reports and statistical analysis required for ISMS Management ReviewSupporting the training, induction and awareness program for employeesAnd you:The ideal candidate for the Information Security Analyst position will have prior experience in an Information Security Governance and Compliance focused position (GRC).You should have good knowledge of the Client Audit process in place in professional services or legal sector firmsAn understanding of the IEC/ISO 27001 framework and experience with ISMS toolingExperience in supporting and maintaining ISO27001 and Cyber Essentials PLUS aligned solutionsKnowledge of NIST, CISSP and GDPRRecognised IS qualificationsThis is a fantastic opportunity to join a prestigious firm working with best-of-breed technologies.Information Security Analyst - Governance, Risk, and Compliance (GRC)
#J-18808-Ljbffr