Full job description

Security Analyst - ISO27001, Cyber Essentials, Cysa+, Mimecast, Microsoft Defender

One of our most ambitious and rapidly growing law firm clients are actively looking to take on a new Security Analyst (ISO27001, Cyber Essentials, Cysa+, Mimecast, Microsoft Defender) on a permanent basis. This role will work close with the Security Manager. The firm have grown by 300% in the last 5 years and have further plans to stimulate growth.

This role will be best suited for someone with 2-3 years experience looking to bring knowledge and confidence to the team, to be considered for this Security Analyst (ISO27001, Cyber Essentials, Cysa+, Mimecast, Microsoft Defender) it's expected you have that alongside:

• Relevant Security qualifications (Cysa+ or others)
• Knowledge of best security frameworks and standards (ISO27001, Cyber Essentials etc.)
• Ideal but not required law firm experience

Key Responsibilities

• Maintain the operational configuration of all in-place security solutions in line with established baselines.
• Monitor security tools and services to ensure they are operating effectively and appropriately.
• Review logs and reports from security tools, workstations, servers and network devices, interpret activity, and help drive appropriate remediation actions.
• Support investigations into suspicious or problematic activity and assist with incident response as required.
• Contribute to vulnerability assessments, penetration testing activities and security audits.
• Provide support and guidance to end users and act as an escalation point for the Service Desk on security tools, best practice, and firm policies and procedures.
• Complete client and supplier security surveys as required, ensuring records and supporting documentation are kept accurate and up to date.