Senior Information Security Engineer - London, United Kingdom - Norton Rose Fulbright LLP

Tom O´Connor

Posted by:

Tom O´Connor

beBee Recruiter


Description
We're Norton Rose Fulbright - a global law firm with over 50 offices and 7,000 employees worldwide.


Our Newcastle Office is currently recruiting for a
Senior Information Security Engineer.As well as the relevant skills and experience, we're looking for people who are innovative, commercial and value the work that they do.

We celebratemultiple approaches and points of view and believe diversity drives innovation, so we're building a culture where difference is valued.


The Team:


The scope of the Information Security function includes all strategic security planning and control oversight to ensure effective risk mitigation takes place within the firm.

The Information Security team implements and operates a number of security solutionsdirectly, such as anti-malware solutions, Internet security proxy servers, and the vulnerability scanning platform, and rely on other departments (IT service delivery, HR, Facilities) to operate all other security controls.

The Information Security team is responsible for ensuring the overall effectiveness of the control framework and managing security incidents. The team work with unified principles and processes around the world while maintaining regional stakeholder relationships.
They adhere to the international standard ISO 27001, and report to the Firm's Chief Information Security Officer.


The Role:


  • Provide security product ownership and maintenance of tools such as next generation antivirus / EDR, web filtering, vulnerability scanning, and privileged access management solutions.
  • Continually improve the teams visibility into the security posture of on premise and cloud infrastructure; provide associated data and risk records as appropriate.
  • Assist with remediation of weak controls as necessary, either technically or through influence.
  • Ensure that the Firm has the requisite capability to investigate, prevent and remediate against security breaches, viruses and deviations from security procedures.
  • Participate in postmortem investigations of Information Security incidents while preparing report documents illustrating the findings and lessons learned.
  • Propose security controls to mitigate identified risks, while improving ongoing operations and incident response processes. Using the risk management process effectively.
  • Act as a technical point of escalation.
  • Maintain effective working relationships with a variety of internal stakeholders.
  • Mentor to junior team members.

Skills and Experience Required:


  • Bachelor's degree in a related discipline (Computer Science, Information Systems Management, Engineering, or similar)
  • Minimum 5 years of experience in a related security field.
  • Previous Network Engineering or Systems Administration background (preferred).
  • Deep technical understanding of security products, including web filtering, next generation antivirus/ EDR, and vulnerability management tools.
  • Ability to rapidly adapt to change and absorb new technologies.
  • Ability to lead troubleshooting in complex environments and provide technical recommendations to solve short and long term issues.
  • Strong knowledge of the security landscape (attack vectors, tooling, best practices for assessment, mitigation, remediation and governance).
  • Track record of delivering high quality solutions througha project delivery or ongoing continual improvement in an operational role.
  • Working knowledge of Authentication protocols, and Identity Access Management technologies such as SSO and MFA.
  • Familiarity with security best practices and risk management operating in cloud environments such as Azure (required), GCP and AWS (nice to have), and in other 3rd party SAAS platforms.
  • Knowledge of Information Security standards such as ISO27001, NIST, CIS.
Our clients come first and whilst we have a high performance culture and work hard as a team, in return we offer range of competitive benefits including:


  • 25 days hols + Bank hols
  • Buy up to 5 days:
-
GP Service:

-
Bupa Healthcare:

-
Pension:

-
Flexible working


In addition, we are proud of our established health and wellbeing programme which supports our employees through mental, physical and lifestyle challenges.


Norton Rose Fulbright is committed to promoting a diverse workforce and an inclusive workplace where everyone can realise their full potential and career ambitions on the basis of merit and skill.

We are open to flexible working practices, and will supportyou in effectively managing your work and personal commitments. We offer a range of family friendly and inclusive employment policies, flexible working arrangements, and employee networks. Find more about Diversity and Inclusionhere.

LI-Hybrid

LI-SC1

More jobs from Norton Rose Fulbright LLP