Cybersecurity Assurance and Compliance Expert

1 day ago


Glasgow, Glasgow City, United Kingdom Clyde & Co Full time

Job Overview

Clyde & Co is seeking a seasoned Cybersecurity Assurance and Compliance Specialist to join our team. In this critical role, you will be responsible for ensuring the firm's information security management system meets international standards.

About You

We are looking for an individual with extensive experience in Information Security and IT Risk Management within a fast-paced environment, preferably within the legal industry. You should possess operational knowledge of one or more international information security standards, risk management, and control frameworks/practices such as ISF SOGP, ISO27001/2, ISO31000, IRAM2, NIST 800-53, and cybersecurity framework. COBIT, CPS-234 etc.

Key Responsibilities

  • Review proposed Client engagement contracts, SLAs, and complete client due diligence questionnaires, audit requests, and competitive bids, working to Client-oriented deadlines.
  • Maintain a repository of standard information security responses and design effectiveness evidence for external audit, client assessments, client RFPs, etc.
  • Maintain and uphold the firm's certifications and Information Security Management System in line with the standard, facilitate such internal and external audit exercises, plus ensure timely remediation for any identified non-conformance as is necessary to keep compliance with the ISO27001 certification.
  • Assess and recommend information security, governance, risk management, and compliance services and working practices that reflect emerging Client expectations and best meet, develop, and improve the firm's current and future information security environment. Assist the Information Security, IT, and other departments with the identification and measurement of security risks and help identify appropriate controls. Carry out periodic assurance of controls to ascertain design effectiveness and maturity.
  • Assist members of the team to carry out other workloads relating to the operation of the Information Security department during periods of higher demand, or where additional resources are required.
  • Facilitate continual improvement by investigating and utilizing latest technologies such as Artificial Intelligence/Machine Learning and other process methodologies to help transform the delivery of the services with a focus on greater efficiency and accuracy.
  • Identify emerging Client implications and requirements for consideration into the firm's information security frameworks, strategy, roadmap, policies, and into IT initiatives roadmap.
  • Stay abreast of technical, industry, regulatory, and company changes and/or trends as they relate to cyber security, the legal industry, information management, InfoSec, technological standards/trends, and IT efficiencies.
  • Facilitate/establish and report on monthly metrics and Key Performance/Risk Indicators relating to Client due diligence work.
  • Provide education and insight to members of IT and other relevant areas, relating to the requirements and expectations of Clients.
  • BUILD AND MAINTAIN RELATIONSHIPS WITH THE TEAM AND RELEVANT MEMBERS OF THE RISK AND CLIENT OPERATIONS DEPARTMENTS, SHARE BEST PRACTICE, AND ENSURE THAT DUE DILIGENCE ACTIVITIES ARE COORDINATED AND EXECUTED EFFICIENTLY.

Salary: £60,000 - £80,000 per annum, depending on experience.



  • Glasgow, Glasgow City, United Kingdom Clyde & Co Full time

    Key Responsibilities Clyde & Co is seeking an experienced professional to lead our Cybersecurity Assurance and Compliance team. As a key member of our Business Services team, you will be responsible for ensuring that our clients receive the highest level of security and compliance services. Key responsibilities include: Reviewing proposed client...


  • Glasgow, Glasgow City, United Kingdom Thales Full time

    About the RoleCybersecurity is a top priority for Thales, and we're seeking a skilled Cybersecurity Assurance Specialist to join our team. As a Cybersecurity Assurance Specialist, you will be responsible for ensuring the security of our systems and data. This is a challenging and rewarding role that requires a strong understanding of cybersecurity principles...


  • Glasgow, Glasgow City, United Kingdom Capgemini Invent Full time

    About the RoleAt Capgemini Invent, we're seeking a highly skilled Cybersecurity Expert to join our team. As a key member of our Digital Trust & Security practice, you'll be responsible for ensuring the security and integrity of our clients' business operations.Your primary focus will be on helping our clients evaluate and mitigate cyber risks, redesign their...

  • Cybersecurity Lead

    4 weeks ago


    Glasgow, Glasgow City, United Kingdom Cathcart Technology Full time

    Cybersecurity Lead - Vulnerability Management ExpertCathcart Technology is seeking a seasoned Cybersecurity Lead to join their rapidly growing global organisation. This role will be responsible for developing and implementing complex security solutions to protect the company's systems, networks, and applications.The CompanyCathcart Technology is a national...

  • Cybersecurity Expert

    4 weeks ago


    Glasgow, Glasgow City, United Kingdom cv-library.co - Jobboard Full time

    Cybersecurity Lead required for a rapidly growing and large-scale global organisation, based in Glasgow.The Company:The business is a national renewables organisation and they are growing their digital capabilities greatly. This is a new position, created in order to help to develop internal cyber protocols and improve them across the business.The company...


  • Glasgow, Glasgow City, United Kingdom NHS Scotland Full time

    Job OverviewWe are seeking a highly motivated and experienced Cybersecurity Expert to join our team as a Senior Information Security Architect.


  • Glasgow, Glasgow City, United Kingdom Cathcart Technology Full time

    Our client, a rapidly expanding global business based in Glasgow, is seeking a highly skilled Senior Cybersecurity Lead to join their team.The company is a national renewables organisation with a growing digital presence, and they require an experienced cybersecurity professional to develop and improve their internal cyber protocols.This is a new position...


  • Glasgow, Glasgow City, United Kingdom Rullion Full time

    Job Title: Compliance and Assurance Lead - Health and Safety ExpertAbout the Role:We are seeking a dedicated Compliance and Assurance Lead to enhance the Health & Safety (H&S) frameworks of our client, a trusted provider of water management services in Scotland. The successful candidate will be responsible for the continuous improvement of the H&S framework...


  • Glasgow, Glasgow City, United Kingdom Barclays Full time

    At Barclays, we are seeking a skilled Data Privacy Lawyer AVP to join our Cyber, Data, IP & Emerging Tech Legal team. This exciting role offers the opportunity to work at the forefront of data privacy and cybersecurity in a dynamic financial services environment.About the RoleThe primary purpose of this position is to provide expert legal advice on data...


  • Glasgow, Glasgow City, United Kingdom Cathcart Technology Full time

    Cybersecurity Lead RoleThe company Cathcart Technology is seeking a Senior Cybersecurity Lead to join their team in Glasgow. This is a new position created to develop and improve internal cyber protocols across the business.The successful candidate will work on a wide range of projects, modernising and improving the Cyber environment. The role involves...


  • Glasgow, Glasgow City, United Kingdom Cathcart Technology Full time

    The company is seeking a Cybersecurity Lead to develop and implement security protocols and procedures to protect the company's systems, networks, and applications. The ideal candidate will have a strong focus on Vulnerability Management, Control Assurance, and Emerging Threats.The Cybersecurity Lead will report directly into the Head of Cyber Security and...


  • Glasgow, Glasgow City, United Kingdom Change Digital – Digital & Tech Recruitment Full time £65,000

    Information Security Assurance and Compliance SpecialistThis is an exciting opportunity to join a leading global law firm in the UK as an Information Security Assurance and Compliance Specialist. The successful candidate will be primarily supporting the team's mission by focusing on internal and client-related security governance, compliance, audit, due...


  • Glasgow, Glasgow City, United Kingdom The Cigna Group Full time

    About the Role:We are seeking a highly skilled Cybersecurity and Cloud Infrastructure Specialist to join our team at The Cigna Group. As a key member of our Information Protection team, you will be responsible for designing, implementing, and maintaining our cloud infrastructure and cybersecurity systems.Key Responsibilities:Design and implement secure cloud...


  • Glasgow, Glasgow City, United Kingdom Be-IT Full time £75,000

    About the RoleWe are seeking a highly skilled Cyber Risk & Information Security Manager to join our team at Be-IT. As a key member of our security team, you will be responsible for protecting our clients from cyber threats by managing risk, developing mitigation plans, and providing leadership with independent assurance of our cybersecurity posture.Key...


  • Glasgow, Glasgow City, United Kingdom Thales Full time

    Cybersecurity Engineering and Advisory RoleAs a Cybersecurity Engineering and Advisory Role within Thales, you will be responsible for ensuring the security and integrity of our customers' information systems.Key Responsibilities:Elaborate cybersecurity test plans to ensure the required level of robustness is achieved.Uphold the Information Systems Security...


  • Glasgow, Glasgow City, United Kingdom The Cigna Group Full time

    About the Role:We are seeking a highly skilled Cybersecurity and Cloud Infrastructure Specialist to join our team at The Cigna Group. As a key member of our IT department, you will be responsible for designing, implementing, and maintaining secure cloud infrastructure solutions that meet the evolving needs of our business.Key Responsibilities:Design and...


  • Glasgow, Glasgow City, United Kingdom Cathcart Associates Group Ltd Full time

    Cybersecurity Policy LeadCathcart Associates Group Ltd is seeking a highly skilled Cybersecurity Policy Lead to join their team. This is a key role within the company's rapidly growing Cyber function, reporting directly to the Head of Cyber Security.The successful candidate will have strong Cyber Security knowledge across the area, with a focus on...


  • Glasgow, Glasgow City, United Kingdom Scottish Water Full time

    About the RoleWe are seeking a highly skilled Compliance and Assurance Lead – Health & Safety to join our team at Scottish Water. As a key member of our organization, you will be responsible for designing and implementing a robust Health & Safety (H&S) framework to ensure compliance and assurance across the organization.Key ResponsibilitiesDevelop and...


  • Glasgow, Glasgow City, United Kingdom ScottishPower Full time

    Cyber Security Assurance and Compliance RoleAbout the RoleWe are seeking a skilled Cyber Security Assurance and Compliance professional to join our team at ScottishPower. This is an exciting opportunity to contribute to the development and implementation of our Cyber Security Assurance Model and to track our Regulatory Compliance posture.Key...


  • Glasgow, Glasgow City, United Kingdom Clyde & Co Full time

    Job SummaryClyde & Co is seeking a highly skilled Information Security Assurance and Compliance Specialist to join our team. As a key member of our Information Security department, you will be responsible for ensuring the firm's information security management system is in line with industry standards and regulations.Key ResponsibilitiesReview and assess...