Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Strengthen security posture through governance, policy, and assurance in a prestigious law firm.
- Company: Join a leading international law firm with a focus on innovation and security.
- Benefits: Competitive salary, professional development, and a dynamic work environment.
- Why this job: Make a real impact on security assurance and influence outcomes from the start.
- Qualifications: 4+ years in information security, strong knowledge of ISO 27001, and experience in regulated environments.
- Other info: Strategic role with excellent career growth opportunities in a collaborative team.
The predicted salary is between 36000 - 60000 £ per year.
We are partnering with a prestigious international law firm to hire an Information Security Assurance Specialist to join its Information Security and Privacy team within the wider Legal, Risk, and Compliance function, based in London. This is a newly created role reporting to the Information Security Manager, focused on strengthening the firm’s security posture. The role sits firmly in the second line of defence, with an emphasis on governance, policy, and assurance rather than day-to-day operations.
The core focus is security assurance testing, particularly penetration testing. You will ensure testing is appropriately scoped, meaningful, and followed through to resolution. You will also embed security assurance into IT projects and change initiatives by defining security requirements, reviewing designs, and working with technical teams to mitigate security risks arising from change.
A key aspect of the role is early engagement with projects. You’ll partner with architects, business analysts, and DevOps teams to challenge designs and influence security outcomes from the outset. The role requires strong technical understanding, without hands-on engineering.
Key responsibilities include:
- Supporting architecture and design reviews
- Ensuring systems align with InfoSec policies and standards
- Helping evolve assurance frameworks as new technologies are adopted
- Supporting ISO 27001 certification and policy development
This is a strategic role with a broad, firm-wide view rather than ownership of a single product or platform.
Required experience:
- 4+ years’ experience in information security or technical cyber security
- Strong knowledge of ISO 27001 and Cyber Essentials Plus (auditor or implementer experience desirable)
- Experience in regulated or private-sector environments (law firm experience advantageous; FS/banking backgrounds welcome)
- Understanding of Lines of Defence models and second-line assurance roles
Information Security Assurance Specialist in London employer: Taylor Root
Contact Detail:
Taylor Root Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Information Security Assurance Specialist in London
✨Tip Number 1
Network like a pro! Reach out to folks in the industry, especially those working in law firms or security roles. A friendly chat can open doors and give you insights that job descriptions just can't.
✨Tip Number 2
Show off your skills in interviews! Prepare to discuss your experience with ISO 27001 and how you've tackled security assurance testing. Real-life examples will make you stand out and show you're the right fit for the role.
✨Tip Number 3
Don’t forget to research the firm! Understanding their security posture and recent projects can help you tailor your conversation and demonstrate your genuine interest in their work.
✨Tip Number 4
Apply through our website! We’ve got loads of resources to help you prepare for interviews and connect with potential employers. Plus, it shows you’re serious about landing that Information Security Assurance Specialist role!
We think you need these skills to ace Information Security Assurance Specialist in London
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Information Security Assurance Specialist role. Highlight your experience with ISO 27001 and any relevant projects you've worked on that align with the job description. We want to see how your skills fit into our security framework!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about information security and how your background makes you a great fit for our team. Don’t forget to mention your experience in regulated environments, as it’s super relevant to us.
Showcase Your Technical Knowledge: In your application, be sure to showcase your understanding of security assurance testing and governance. We’re looking for someone who can engage early with projects, so mention any experiences where you’ve influenced security outcomes in past roles.
Apply Through Our Website: We encourage you to apply through our website for the best chance of getting noticed. It helps us keep track of applications and ensures you’re considered for this exciting opportunity with our Information Security and Privacy team!
How to prepare for a job interview at Taylor Root
✨Know Your Stuff
Make sure you brush up on your knowledge of ISO 27001 and Cyber Essentials Plus. Be ready to discuss how you've applied these standards in previous roles, especially in regulated environments. This will show that you understand the importance of governance and assurance in information security.
✨Showcase Your Strategic Thinking
Since this role is all about strengthening security posture, be prepared to talk about how you've influenced security outcomes in past projects. Think of examples where you engaged early with teams to challenge designs and mitigate risks. This will demonstrate your proactive approach and strategic mindset.
✨Understand the Lines of Defence
Familiarise yourself with the Lines of Defence model and be ready to explain how the second line of defence operates within an organisation. Discuss how your experience aligns with this model and how you can contribute to the firm's security assurance efforts.
✨Ask Insightful Questions
Prepare some thoughtful questions about the firm's current security challenges and their approach to assurance frameworks. This not only shows your interest in the role but also gives you a chance to demonstrate your understanding of the industry and the specific needs of the firm.
