This candidate is a highly capable and technically skilled information security professional with a strong track record in legal risk and compliance, particularly in law firm environments. With a background in computer science and cybersecurity, this individual brings a detailed, process-driven approach to improving firm-wide information security, managing risk registers, conducting internal audits, and supporting ISO27001 compliance.

In the most recent role at a top 50 UK law firm, the candidate held responsibility for promoting best practice in information security, triaging security risks, running phishing simulations, and acting as a trusted internal consultant on cyber-related incidents. They worked closely with IT and senior stakeholders to design and deliver vulnerability assessments and policy improvements, as well as producing research on emerging threats and technologies.

Key competencies:

• Proven expertise in ISO27001 audits, both internal and external
• Risk acceptance reviews and risk register management
• Delivery of security awareness and phishing simulation programmes
• Strong stakeholder engagement, including collaboration with the C-suite
• Third-party assurance and supplier risk assessments
• Drafting and maintaining IT and cybersecurity policies and procedures
• Conducting penetration testing and supporting vulnerability remediation
• Hands-on experience with SIEM tools and cloud security environments
• Regularly leading least-privilege access reviews and cloud account governance

Legal Experience:

Information Security Analyst | Top 50 UK Law Firm | 1 year
Information Security Officer and Auditor | Top 100 UK Law Firm | 0.5 years
Information Security Management System Administrator | Technology Company | 0.5 years
Application Support Analyst | Public Transport Group | 1.5 years

Education & Qualifications:

MSc Cyber Security | University
BSc Computer Science | University
Business Level 3 | Business Training College
IT Level 3 | College

If you're looking for skilled risk and compliance professionals with hands-on law firm experience, get in touch to explore profiles like this one.