Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Strengthen security posture through governance, policy, and assurance in a prestigious law firm.
- Company: Join a leading international law firm with a focus on innovation and security.
- Benefits: Competitive salary, professional development, and a dynamic work environment.
- Why this job: Make a real impact on security assurance and influence outcomes from the start.
- Qualifications: 4+ years in information security, strong knowledge of ISO 27001, and experience in regulated environments.
- Other info: Strategic role with excellent career growth opportunities in a collaborative team.
The predicted salary is between 48000 - 72000 £ per year.
We are partnering with a prestigious international law firm to hire an Information Security Assurance Specialist to join its Information Security and Privacy team within the wider Legal, Risk, and Compliance function, based in London. This is a newly created role reporting to the Information Security Manager, focused on strengthening the firm's security posture. The role sits firmly in the second line of defence, with an emphasis on governance, policy, and assurance rather than day‐to‐day operations.
The core focus is security assurance testing, particularly penetration testing. You will ensure testing is appropriately scoped, meaningful, and followed through to resolution. You will also embed security assurance into IT projects and change initiatives by defining security requirements, reviewing designs, and working with technical teams to mitigate security risks arising from change. A key aspect of the role is early engagement with projects. You'll partner with architects, business analysts, and DevOps teams to challenge designs and influence security outcomes from the outset. The role requires strong technical understanding, without hands‐on engineering.
Key Responsibilities- Supporting architecture and design reviews
- Ensuring systems align with InfoSec policies and standards
- Helping evolve assurance frameworks as new technologies are adopted
- Supporting ISO 27001 certification and policy development
This is a strategic role with a broad, firm‐wide view rather than ownership of a single product or platform.
Required Experience- 4+ years' experience in information security or technical cyber security
- Strong knowledge of ISO 27001 and Cyber Essentials Plus (auditor or implementer experience desirable)
- Experience in regulated or private‐sector environments (law firm experience advantageous; FS/banking backgrounds welcome)
- Understanding of Lines of Defence models and second‐line assurance roles
Please note that your personal information will be treated in accordance with our Privacy Policy.
Information Security Assurance Specialist in London employer: Taylor Root Dusseldorf
Contact Detail:
Taylor Root Dusseldorf Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Information Security Assurance Specialist in London
✨Tip Number 1
Network like a pro! Reach out to folks in the industry, especially those working in law firms or security roles. A friendly chat can open doors and give you insights that job descriptions just can't.
✨Tip Number 2
Show off your skills! Prepare a portfolio or case studies showcasing your experience with ISO 27001 and security assurance testing. This will help you stand out during interviews and demonstrate your expertise.
✨Tip Number 3
Be proactive! If you see a job that fits, don’t wait for the perfect moment. Apply through our website and follow up with a quick email to express your enthusiasm. It shows initiative and keeps you on their radar.
✨Tip Number 4
Prepare for the interview by brushing up on your knowledge of governance and policy frameworks. Be ready to discuss how you would approach security assurance in projects, as this is key for the role.
We think you need these skills to ace Information Security Assurance Specialist in London
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Information Security Assurance Specialist role. Highlight your experience with ISO 27001 and any relevant projects you've worked on that align with the job description. We want to see how your skills fit into our team!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about information security and how your background makes you a great fit for our firm. Don’t forget to mention your understanding of governance and assurance frameworks.
Showcase Your Technical Knowledge: In your application, be sure to showcase your technical understanding of security assurance testing and penetration testing. We’re looking for someone who can engage early with projects, so share examples of how you've influenced security outcomes in past roles.
Apply Through Our Website: We encourage you to apply through our website for the best chance of getting noticed. It’s the easiest way for us to keep track of your application and ensure it reaches the right people. We can’t wait to hear from you!
How to prepare for a job interview at Taylor Root Dusseldorf
✨Know Your Stuff
Make sure you brush up on your knowledge of ISO 27001 and Cyber Essentials Plus. Be ready to discuss how you've applied these standards in previous roles, especially in regulated environments. This will show that you understand the importance of governance and assurance.
✨Engage Early
Since this role involves early engagement with projects, think about examples where you've influenced security outcomes from the start. Prepare to discuss how you’ve partnered with architects and DevOps teams to challenge designs and mitigate risks.
✨Showcase Your Strategic Thinking
This position is all about having a broad view rather than focusing on a single product. Be prepared to talk about how you've supported architecture and design reviews in the past, and how you can help evolve assurance frameworks as new technologies come into play.
✨Be Ready for Scenario Questions
Expect questions that test your problem-solving skills in real-world scenarios. Think about situations where you had to ensure compliance with InfoSec policies or support ISO 27001 certification. Having specific examples will demonstrate your hands-on understanding of the role's requirements.