Information Security Officer - Risk And Audit

Information Security Officer - Risk and Audit

Permanent - £38k - £42k

Location - Hybrid based out of either Taunton or Bristol

Sponsorship and short-term visa applicants cannot be considered.

Your new company

A leading law firm with numerous offices across the UK, who have numerous initiatives and projects in place to improve the positive impact the business has on environmental, social and governance.

Your new role

You will be reporting to the Head of Information Security and Data Protection. You will be responsible for a number of important functions within the Information Security and Data Protection Team, including:

1. Conducting internal ISO27001 audits, with a focus on Information Security, IT, and technology.
2. Assisting with conducting risk assessments and due diligence checks for projects, new technology and suppliers.
3. Conducting meetings with risk and project owners to ensure risks and audit outcomes are managed to completion.
4. Promoting discussion on potential solutions for information security improvements.
5. Helping to improve information security awareness throughout the firm through training and practical advice.
6. Assisting the Infosec and Data Protection team in monitoring changes in the risk landscape through learning and knowledge sharing.
7. Keeping audit, risk and procedural documentation up to date.
8. Due to being a part of a small team, you will need flexibility in being able to administrate infosec incidents and assist with other IS/DP projects.

What you'll need to succeed

You will have an IT-based information security experience and an understanding of data privacy. Ideally, you will also have:

1. ISO27001 audit experience and/or experience in IT risk assessments or supplier due diligence.
2. Strong stakeholder engagement skills.
3. The ability to work re- and proactively when it comes to information security risks.
4. Strong verbal and written communication skills.

What you'll get in return

Salary of £38k-£40k
Flexible working
'Mainly remote' role - once a month(ish) team meet ups, and ability to be on site should there be a major breach or incident.

What you need to do now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.