Information Security Officer

Key Responsibilities

• Responsible for delivering the programme/plans to ensure the Firm’s information assets are adequately protected. Duties will include some or all of the following:
• Act as a trusted advisor on Information Security related activities.
• Deliver programmes and processes to reduce information security risk and strengthen the Firm's security posture.  Monitor, measure and report on the effectiveness of information security measures. Identify any trends that may require further action e.g. improved security awareness, updated controls etc.
• Manage responses to audit requests from clients and external auditors.  Assist Business Development with pitch responses as required.
• Support the operation of the ISMS and maintain ISO27001 and Cyber Essentials certifications.
• Assist with periodic monitoring of audit logs in accordance with requirements and report findings and concerns for further analysis and action.
• Assist with supply chain due-diligence assessments.
• Perform internal investigations and data discovery exercises in support of Legal & Risk, HR and outside counsel.
• Collaborate with the wider Technology & Data teams to ensure security best practices are integrated into system designs and configurations.

Qualifications & Experience

• Degree-level qualifications in computer science, information security, or a related field, or equivalent professional experience.
• Relevant professional certifications, such as CISSP, CompTIA Security+, or equivalent, are desirable.
• Proven experience in implementing, managing, and maintaining cyber security programmes within a complex organisation.
• Demonstrable knowledge of information security frameworks, risk management, and technical security best practices.
• Strong ability to interpret, apply, and communicate technical security requirements in a clear, business-focused manner to both technical and non-technical audiences.
• Experience collaborating effectively across multi-disciplinary teams.
• Familiarity with legal, regulatory, and compliance requirements relevant to information security in global organisations.
• Excellent analytical, organisational, and reporting skills, with a proactive approach to solving problems and improving security processes.

The base salary range offered for this role will be between $125,000 and $160,000 and represents the firm’s good faith and reasonable estimate of the range of possible compensation at the time of posting. Actual compensation will be dependent upon a number of factors, including but not limited to, the candidate’s relevant experience, performance, qualifications, degrees and location, as well as the needs of the firm. The total compensation package for this position may include overtime pay, discretionary bonuses and other benefits.

Technical Skills:

This list of duties and responsibilities above is not exhaustive.  It is intended to describe the general content of, and requirements for, the performance of this job. As such, the role may also include the undertaking of additional tasks as required.