Information Security Analyst - Remote Working in London

TypePermanent - Full TimeLocationLondonJob RoleInformation TechnologyAbout WithersA law firm focused on people, performance, and collaboration.We are united in our commitment to integrity, quality and collaboration. We have a culture of high performance and deliver excellent service consistently across the firm. Our role is to get to know each individual client, find out where they want to be, and help them to get there - whether they are building a business, buying a home or protecting and defending their interests.And we are agile - focusing on strategy rather than rigid ideas and traditional hierarchy.We are looking for an experienced IT Security Analyst to support security operations across the firm's global technology estate. The successful candidate should have practical experience working with modern enterprise security platforms covering endpoint detection and response, extended detection and response, cloud security, threat monitoring, behavioural analytics and vulnerability management, and be comfortable engaging with IT teams, senior stakeholders and third-party vendors.Strong written and verbal communication skills are essential, including the ability to explain technical security matters clearly to legal, business and IT stakeholders.Areas of focus and responsibilitiesMonitor, triage and investigate security alerts across the firm’s security monitoring and response platforms, including suspicious activity, root cause analysis and proportionate remediation.Maintain and improve security monitoring, detection rules, alert workflows, operational playbooks, procedures and management reporting.Assist with vulnerability management, supplier and client due diligence returns, audit responses, evidence gathering and compliance monitoring against policies, standards and regulatory or client requirements.Provide practical, risk-based security advice for change advisory matters, projects, cloud services, new technologies and internal security queries.Support disaster recovery, business continuity and resilience testingWork with colleagues across all offices to support a consistent global approach to security operations, incident response and alignment with the firm's security standards and risk appetite.Maintain current knowledge of supported technologies, emerging cyber threats and security best practice.It is intended to describe the general content of, and requirements for the performance of this job, and as such, the role may also include the undertaking of additional tasks as required. Skills and attributes3+ years' experience in cyber security, security operations, incident response or a related technology role, ideally within a medium to large professional services environment.Practical experience of security monitoring, alert triage, threat detection, incident response, business email compromise, suspicious user activity and vulnerability management.Hands-on experience with modern security operations tooling, including SIEM/XDR, endpoint protection, cloud security, email security, data loss prevention, information protection, behavioural analytics and vulnerability management platformsGood understanding of identity, access and cloud security, including Entra ID, MFA, Conditional Access, privileged access, SaaS logging, endpoint telemetry, evidence preservation and audit trails.Awareness of common attack techniques and frameworks, including MITRE ATT&CK, and relevant security, privacy and assurance frameworks such as ISO 27001, NIST CSF, Cyber Essentials and GDPR.Ability to manage security findings through to remediation, including prioritisation, risk acceptance, progress tracking and clear incident, risk and management reporting.Most important is a desire to learn, develop and help keep the firm secure, resilient and trusted by its clients.30am to 5.30pm with reasonable out-of-hours flexibility required for urgent security incidents, investigations and response activities as part of the security teamHybrid working policy with a minimum of 2 days per week worked in the office12 week probation period4 week notice periodFlexible benefits package including pension, private medical, season ticket loan, subsidised gym memberships, lifestyle discount scheme, on site café.Equal Opportunities Employment Statement It is the policy of Withers to provide equal opportunities for all employees in relation to recruitment, training and promotion. Decisions in these areas will be made only by reference to the requirements of the job and shall not be influenced by any consideration of age, disability, gender reassignment, marriage or civil partnership, pregnancy or maternity, race including colour, nationality and ethnic and national origin, religion or belief, sex or sexual orientation. Job alertsBe the first to know when a new position becomes available with instant alerts to your phone