Information Security Officer

We have an excellent opportunity for an experienced individual to join as an Information Security Officer within our Business Information Systems (BIS) department. As an Information Security Officer, you will be the Subject Matter Expert for Information Security sitting within the Technical Services and Security team reporting to the IT Compliance Manager.

The key objectives of the role are:

• To manage, maintain and monitor the Information Security Management System (ISMS) within the firm’s Integrated Management System (IMS)


• To embed a culture of information security within the firm, with a focus on security by design


• To act as an interface for security between the strategic and process-based activities and the work of the technology-focused experts, analysts, and administrators.


• To work with the IT organisation and business management to align security priorities and plans with key business objectives.


The successful individual will be a critical member of the BIS Team underpinning assisting with the implementation of Gowling WLG's IT security roadmap and will be expected to develop relationships within this team and key stakeholders across the business to provide best in class security architecture.

We are looking for someone who has extensive professional experience in a security-based role, presenting a strong understanding of ISO 27001, Cyber Essentials and PCI/DSS accreditation requirements with knowledge and experience of working within a NIST framework, educated at degree level or equivalent.

To this role you will bring a strong understanding of advanced threat detections, continuous vulnerability assessment, response and mitigation strategies used in Cyber Security operations along with the ability to define the technology security requirements in conjunction with technical teams. You will have experience in conducting security risk assessments and recommending compensating controls, balancing risk, and commercial drivers as well as interfacing with clients, business partners and other third parties IT relations to information security.

Key Skills Required:

• A keen and natural interest of IT security trends with an excellent all-round knowledge of IT


• Excellent analytical, written, and verbal communication skills including the ability to effectively communicate technical information to non-technical users.


• Demonstrable project management and multi-tasking capabilities.


• Ability to excel in a fast-paced, ambiguous, and evolving marketplace.


• Methodical with excellent attention to detail


• Ability to adapt to various internal and external situations and deliver high quality service.


• Team player, providing support to colleagues and managers and working with teams across the firm.


• Flexible approach with a customer and business focus


• Experience of working within a matrix organisation, including reporting into a number of people including technical line managers and project managers.


• Have obtained (or will obtain) industry recognised certifications where applicable/relevant.


Technical Knowledge Required:

• GDPR


• Business Continuity and Disaster Recovery Planning


• Information Security Policies


• Creating Education and Awareness programmes


• Security Incident Response


• Secure Development Processes (including OWASP)


• Third Party Supplier Management


• Antivirus, Malware, threat hunting techniques and technologies


• Ideally an ISO 27001 Lead Implementer/Auditor along with any security accreditation such as CISSP, CISA, CISM would be extremely advantageous.
  
  The opportunity to work for a firm that has been recognised as one of best places to work in the UK and has been ranked by Great Place to WorkÂŽ for 24 consecutive years.


Excellent benefits, including:

• A hybrid approach to office and remote working


• 25 days annual leave, with the option to buy up to a week's extra annual leave.


• Private medical insurance, and the option to add family members.


• A generous pension allowance.


• Life assurance covering four times your annual salary.


• The chance of a three-month sabbatical every five years


• Maternity, paternity, and adoption leave schemes.


• A range of health and wellbeing programmes


• State of the art offices, in the heart of Birmingham City Centre, with an onsite restaurant


• Opportunities to flourish in your role through training and personal development.


Equal Opportunities:

Gowling WLG is committed both to promoting equality and diversity in the firm and to Equal Opportunities in employment. The firm believes in equality of opportunity regardless of race or racial group (including colour, nationality, ethnicity, national origins), religion or belief, age, disability, sexual orientation, sex, gender re-assignment and gender identity, marriage and civil partnership, and pregnancy, maternity, and paternity. This also includes any incidents of perceptive or associative discrimination and harassment.

At Gowling WLG we seek to attract and retain talented people from a diverse range of backgrounds and cultures, to create an exciting and rewarding place to work. Our aim is to fulfil everyone is potential and together to achieve personal and business goals.