About Ashurst:

Ashurst is a leading global law firm with a history spanning almost 200 years, and clear strategy for our future growth. Our in-depth understanding of our clients and commitment to providing exceptional standards of service have seen us become a trusted adviser to local and global corporates, financial institutions and governments in all areas of commercial law. To find out more please visit here

In order to comply with regulatory and client requirements, Ashurst will undertake appropriate vetting of staff. When applicants accept a job offer, Ashurst, alongside a specialist provider, will undertake professional verification and background checks.  These checks are only undertaken with consent, and in accordance with our legal and regulatory obligations

Business Area – Information Technology

Role: Information Security Analyst

Location: Based in the Glasgow  office. Some travel to other Ashurst offices may be required from time to time.

Reporting to: Information Security Manager 

Hours of work - 09:00 to 17:30hrs  Mon-Fri 

Department/ Role Overview:

The information security analyst role supports the information security team in achieving its core strategic and operational information security obligations and objectives

The analyst role is responsible for assessing various sources of information to proactively identify potential or actual data security risks and incidents that require further analysis and remediation 

The role is pivotal in preventing non-compliance to IT security standards and operational practices  through regular compliance assessments  Also providing clear and concise security control descriptions to client audit & questionnaire responses

Providing insight and in-depth understanding of the firms information security policies and standards to project teams

It is also the subject matter expert for assessing security related aspects of IT change requests on behalf of the IT Security function at IT Change Board meetings.

Main responsibilities:

• Daily analysis and reporting of potential or actual data security incidents and Escalating incidents as necessary to the relevant business function for further analysis
• Supporting client contractual security compliance activities by providing documented responses and supporting evidence to client assurance questionnaires and pitch responses
• Security Compliance reporting of IT systems and Security devices through a combination of manual and automated analysis
• Assessing security risks of planned IT solution changes
• Working a first point of contact for all operational IT requests for exemption to security policy. Documenting requirement , assessing risk , approving or escalating requests to information security management as necessary
• First line triage of Information Security related incidents and requests received via the IT service desk . Identifying and then reassigning downstream to the appropriate resolver group(s) or function
• Providing detailed information and explanation on the firms IT Security policies and standards to internal and external service providers
• Assist the information security manager in maintaining the firms security standards and policy documents
• Performing any other information security task as directed

Risk and Control: Ensure that all activities and duties are carried out in full compliance with our regulatory requirements and internal policies.

Essential skills and experience:

• Good understanding of the soft skills involved in successful management of own time
• Good knowledge of MS Word , Excel and PowerPoint software applications
• Good working knowledge of information technology including Desktops, Laptops , Servers , Virtualisation technologies, Networking and Windows operating systems
• Good understanding of the security aspects of IT Security devices including Firewalls ,web proxies, Anti malware products , Data Leakage Protection solutions
• Excellent analytical skills
• A good eye for detail, ability to work accurately and effectively even when under pressure
• Able to learn and understand Information Security technology and risk concepts and associated standards both through on-the-job and structured external training
• Ability to prioritise own work and to deliver objectives on time and within quality criteria
• Able to report on the status of multiple projects concurrently
• Liaise with other teams within the firm
• Assist with research and evaluation of solutions
• Tactful and diplomatic when in pressured situations
• Good presentation, written and communication skills
• Uses initiative – 'can do' approach
• Client focused

Measurables

• Ensure timely production of daily reporting of the Firms Data Leakage Prevention Systems and Document Management Systems
• Collaborate with Information Security Team colleagues to recommend changes to and then implement security process improvements
• Ensure IT changes are assessed for compliance to security policies and standards
• Maintain Security Compliance of IT systems .and Security equipment
• Conduct timely recording of risk assessment/treatment actions and scheduling of security verification assessments of IT projects