Information Security Officer

3 weeks ago

London, United Kingdom Ashurst Full time

About Ashurst

Ashurst is a leading progressive global law firm with a rich history spanning more than 200 years. We are proud of our history and are future-focused, having expanded into new technologies through our NewLaw division, Ashurst Advance, and our consulting arm. Our in-depth understanding of our clients and commitment to providing excellent standards of service have seen us become a trusted adviser to local and global corporates, financial institutions and governments in all areas of commercial law. To find out more please visit .

Department/Role overview

The successful candidate will play a crucial role in ensuring the security of our systems and data by evaluating the risks associated with third-party vendors and internal projects, and recommending appropriate risk mitigation strategies.

The Information Security Officer (Digital) will work closely with cross-functional teams, including the Office of the Chief Digital Officer, Risk & Compliance, project management, and technical teams, to ensure compliance with security standards and best practices.

Main responsibilities

Assessing Security Risks (SCTY - Level 4, BURM - Level 4)

  • Conduct vendor risk assessments and project security risk assessments based on established methodologies and frameworks.
  • Evaluate security risks associated with third-party vendors and internal projects, considering factors such as security, privacy, and compliance.
  • Identify vulnerabilities and potential risks and provide recommendations for risk mitigation strategies.
  • Apply knowledge of industry best practices and regulatory requirements to assess and mitigate security risks.

Information Security (SCTY - Level 4)

  • Ensure compliance with security policies, standards, and procedures in vendor relationships and project activities.
  • Develop and maintain security assessment frameworks and methodologies for vendor risk assessments and project security risk assessments.
  • Stay informed about emerging security threats, industry trends, and regulatory requirements related to vendor management and project security.
  • Participate in incident response activities and contribute to security incident investigations and remediation efforts.

Supplier Relationship Management (SUPP - Level 4)

  • Collaborate with procurement teams to assess and manage security risks associated with vendors.
  • Review vendor security documentation, such as questionnaires, audits, and certifications, to evaluate their security posture.
  • Provide guidance to procurement teams regarding security requirements and standards for vendor selection and ongoing monitoring

Risk Management (BURM - Level 4)

  • Apply risk management principles to identify, assess, and prioritise security risks.
  • Collaborate with project managers and technical teams to assess security risks and propose appropriate risk mitigation strategies.
  • Track and monitor the implementation of security remediation plans.

Security Compliance Management (SCAD - Level 3, SCTY - Level 4, AUDT - Level 4

  • Conduct periodic reviews and audits to ensure compliance with security policies, standards, and regulatory requirements.
  • Support the development and enforcement of security policies, standards, and procedures related to vendor management and project security.
  • Provide security awareness training and guidance to staff as required.

Risk and Control: Ensure that all activities and duties are carried out in full compliance with our regulatory requirements and internal policies.

Essential skills and experience

  • Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent work experience).
  • Professional certifications such as CISA, CISM, or similar credentials are preferred.
  • Strong knowledge of information security principles, best practices, and standards (e.g., ISO 27001, NIST).
  • Experience in conducting vendor risk assessments and project security risk assessments.
  • Familiarity with security frameworks and assessment methodologies.
  • Knowledge of regulatory requirements related to data privacy and protection (e.g., GDPR, CCPA) is a plus.
  • Strong analytical and problem-solving skills.
  • Excellent written and verbal communication skills.
  • Ability to work independently and collaboratively in a team-oriented environment.
  • Attention to detail and a commitment to maintaining high-quality standards.

Other Responsibilities (as required)

  • Other suitable duties, consistent with the duties and responsibilities of the position as directed by the supervisor or nominated delegate.

Background checks

In order to comply with regulatory and client requirements, Ashurst will undertake appropriate vetting of staff. When applicants accept a job offer, Ashurst, alongside a specialist provider, will undertake professional verification and background checks. These checks are only undertaken with consent, and in accordance with our legal and regulatory obligations.

#J-18808-Ljbffr

  • Head of Security Operations

    1 month ago

    London, United Kingdom Information Security Solutions Full time

    Title: Head of Operational Security Reference No: 2181 Company: Online Location: London, UK Reports to CISO Day Rate: TBC Duration 5 months The Role This role reports to the CISO and is part of the security leadership team. The Person: An analytical problem solver with demonstrable long-term experience leading and improving operational security...

  • Information Security Officer

    1 month ago

    London, United Kingdom Digby Morgan Full time

    summary - _ city of london, london_ - _ contract_- specialism - it- sub specialism - network, systems & security- reference number - PR-1258548 - job details Information Security Officer - 100% Remote - contract flexible based upon experience. Are you a seasoned Information Security Officer with a passion for safeguarding digital assets and ensuring robust...

  • Information Security Officer

    4 weeks ago

    London, United Kingdom Akkodis Full time

    **Information Security Officer** Akkodis are currently working in partnership with a global technical service provider to recruit an experienced Information Security Officer who will be responsible for maintaining ISMS that align with company standards. **Please note this is a remote role and successful applicants can be based UK wide.** **The Role** As...

  • Information Security Officer

    1 month ago

    London, United Kingdom Comtecs Ltd Full time

    IT Security Officer / InfoSec Officer / Information Security Officer - Governance, Risk, Compliance; Implementation of Security Controls; Risk Assessments; Security Audits; InfoSec Advisory; Incident Management. CISM, CISSP, CySA+, CASP+ etc; ISO 27001,NIST, Cyber Essentials Plus. London / Remote (Hybrid 1 Days Per Week In Office). £80k - £85k +...

  • Security Officer

    1 month ago

    London, United Kingdom Trinity Security Full time

    We are looking for a Security Officer to join our team. The Security officer will report directly to the Security Duty Manager and will monitor who enters and leaves the building, check their id-card as well as patrol of the building. The Security Officer will act as the first line emergency response to any given security situation and effectively control...

  • Information Security Officer

    5 days ago

    London, United Kingdom Showpad Full time

    **Information Security Officer** **Where are you based?** London, UK **What's the mission?** Hi there! ✋ Are you ready to embark on an exciting journey safeguarding digital scopes with Showpad, a global leader in cutting-edge sales enablement technology? We're on the lookout for an ingenious **Information Security Office**r to fortify our defences and...

  • Security Officer

    1 month ago

    London, United Kingdom 2012 Security Full time

    Asset Protection Security Officer We have night shifts available, 7pm - 7am, 4 on / 4 off rota. Duties will include - asset protection - patrolling all floors of the building - locking and unlocking - proactively dealing with any incidents that may occur. You must have excellent communication skills, a smart and professional appearance, be mobile and have...

  • Security Officer

    1 month ago

    London, United Kingdom 2012 Security Full time

    Corporate Security Officer We have day and night shifts available, average of 48 hours a week. Duties will include - asset protection - patrolling all floors of the building - locking and unlocking - proactively dealing with any incidents that may occur. You must have excellent communication skills, a smart and professional appearance, be mobile and have...

  • Security Officer

    1 month ago

    London, United Kingdom 2012 Security Full time

    Asset Protection Security Officer We have night shifts available, average of 42 hours a week over 3 nightshifts. One night, one night off rota Duties will include - asset protection - patrolling all floors of the building - locking and unlocking - proactively dealing with any incidents that may occur. You must have excellent communication skills, a smart...

  • Information Security Officer

    2 weeks ago

    London, Greater London, United Kingdom Locke and McCloud Full time

    Role: Information Security OfficerLocation: LondonSalary: £70,000+Have you got what it takes to succeed The following information should be read carefully by all candidates.Locke & McCloud have partnered with a global legal services firm who are looking to grow a well- established Information Security function. Keen to hear from individuals that have worked...

  • Information Security Officer

    1 month ago

    London, United Kingdom Kubapay Full time

    Description Kuba is looking for an Information Security Officer (ISO) responsible for the strategic planning, development and administration of an effective information security program. As the ISO, you will have system and information ownership and develop, establish and maintain standards, procedures and guidelines to promote the security and...

  • Information Security Officer

    6 days ago

    London, United Kingdom Locke and McCloud Full time

    Job Description Role: Information Security Officer Location: London Salary: £70,000+ Locke & McCloud have partnered with a global legal services firm who are looking to grow a well- established Information Security function. Keen to hear from individuals that have worked in highly regulated environments and have a clear track record of delivering on...

  • Information Security Officer

    2 weeks ago

    London, United Kingdom Locke and McCloud Full time

    Role: Information Security OfficerLike the look of this opportunity Make sure to apply fast, as a high volume of applications is expected Scroll down to read the complete job description.Location: LondonSalary: £70,000+Locke & McCloud have partnered with a global legal services firm who are looking to grow a well- established Information Security function....

  • Information Security Officer

    2 weeks ago

    London, United Kingdom Locke and McCloud Full time

    Role: Information Security OfficerLocation: LondonSalary: £70,000+Locke & McCloud have partnered with a global legal services firm who are looking to grow a well- established Information Security function. Keen to hear from individuals that have worked in highly regulated environments and have a clear track record of delivering on team project work. This...

  • Information Security Officer

    2 weeks ago

    London, United Kingdom Locke and McCloud Full time

    Role: Information Security Officer Location: London Salary: £70,000+ Locke & McCloud have partnered with a global legal services firm who are looking to grow a well- established Information Security function. Keen to hear from individuals that have worked in highly regulated environments and have a clear track record of delivering on team project work. ...

  • Information Security Officer

    2 weeks ago

    London, United Kingdom Locke and McCloud Full time

    Role: Information Security Officer Location: London Salary: £70,000+ Locke & McCloud have partnered with a global legal services firm who are looking to grow a well- established Information Security function. Keen to hear from individuals that have worked in highly regulated environments and have a clear track record of delivering on team project work. ...

  • Information Security Officer

    2 weeks ago

    London, United Kingdom Locke and McCloud Full time

    Job DescriptionRole: Information Security OfficerLocation: LondonSalary: £70,000+Locke & McCloud have partnered with a global legal services firm who are looking to grow a well- established Information Security function. Keen to hear from individuals that have worked in highly regulated environments and have a clear track record of delivering on team...

  • Information Security Officer

    6 days ago

    London, United Kingdom Locke and McCloud Full time

    Role: Information Security OfficerLike the look of this opportunity Make sure to apply fast, as a high volume of applications is expected Scroll down to read the complete job description.Location: LondonSalary: £70,000+Locke & McCloud have partnered with a global legal services firm who are looking to grow a well- established Information Security function....

  • Information Security Officer

    1 day ago

    London, United Kingdom DGH Recruitment Full time

    Information Security Officer Key Responsibilities: - Perform security assessments for vendors and projects, identifying risks and recommending mitigation strategies. - Ensure compliance with security policies and standards in all vendor and project activities. - Develop and maintain frameworks for security assessments. - Stay updated on emerging security...

  • Information Security Officer

    4 days ago

    London, Greater London, United Kingdom Showpad Full time

    Where are you based? This role is available for Hybrid working from our London office.What's the mission?Hi there Are you ready to embark on an exciting journey safeguarding digital scopes with Showpad, a global leader in cutting-edge sales enablement technology? We're on the lookout for an ingenious Information Security Officer to fortify our defences and...