Junior Information Security Analyst

Salary: £45,500 - 73,500 per year

• We are looking for someone with an interest in developing a career within Information Security, GRC, Risk & Compliance.
• We ideally want an understanding of information security, risk management and governance principles.
• Strong organisational and administrative skills are required.
• Excellent written and verbal communication skills are required.
• Excellent attention to detail and a methodical approach to work are required.
• The ability to manage multiple priorities and meet deadlines is required.
• Strong analytical and problem-solving skills are required.
• Good working knowledge of Microsoft Office, including Word, Excel, PowerPoint and Outlook, is required.
• The ability to build effective relationships with stakeholders at all levels is required.
• A self-motivated approach and willingness to learn and develop within Information Security and Risk & Compliance is required.
• Experience or knowledge of ISO 27001 or other information security frameworks would be advantageous.
• Experience or knowledge of supporting audits, compliance activities or governance processes would be advantageous.
• Experience or knowledge of working within Information Security, Risk, Compliance, Governance or a related function would be advantageous.
• Experience or knowledge of supplier assurance and third-party risk management would be advantageous.
• Experience or knowledge of producing reports, dashboards or management information would be advantageous.
• Relevant qualifications or certifications such as ISC2 Certified in Cybersecurity (CC), CompTIA Security+, ISO 27001 Foundation or similar would be advantageous.

• Support the administration and continual improvement of our Information Security Management System (ISMS).
• Assist with ISO 27001 certification, surveillance and internal audit activities.
• Coordinate the collection of audit evidence and support remediation tracking.
• Support the management and maintenance of information security policies, standards, procedures and supporting documentation.
• Maintain information security risk, treatment, action and exception tracking records.
• Coordinate client information security due diligence questionnaires and assurance requests.
• Support third-party supplier assurance and risk assessment activities.
• Assist with the production of information security metrics, dashboards and management reporting.
• Support ISMS objectives and wider governance reporting.
• Assist with security awareness, communications and training initiatives across our firm.
• Maintain information security governance documentation, registers and tracking mechanisms.
• Work collaboratively with stakeholders across our business to support information security and compliance requirements.

• Excel
• Support
• Security

More:

We are a leading law firm with a strong reputation for delivering high-quality legal services to clients across a range of sectors. As we continue to strengthen our information security and risk capabilities, we are looking for an Information Security Analyst to join our Information Security and Risk & Compliance function in London on a permanent basis. This is an excellent opportunity to develop your career within Information Security Governance, Risk and Compliance, with exposure to ISO 27001, risk management, supplier assurance, audits and information security governance within a professional services environment.

last updated 36 week of 2026