Information Security Officer - Leeds
Job Introduction
DAC Beachcroft is looking to appoint an Information Security Officer into our Team in Leeds.
In today's high technology environment, organisations are becoming more and more dependent on their information systems. People are increasingly concerned about the proper use of information, particularly personal data and the threats to information systems are increasing. Many organisations will identify information as an area of their operation that needs to be protected as part of their system of internal control.
As a business, we are certified to ISO27001:2013. Information security is essential to us and to our clients and we are therefore committed to:
- Maintaining appropriate levels of confidentiality, integrity and availability of our information and associated information assets;
- Complying with all regulatory and legal obligations in which we operate;
- Complying with all client contractual obligations that we have in place;
- Providing effective information security awareness training to our colleagues, and keeping them informed of all policies and procedures and their responsibilities regarding them.
- Providing end users (fee earning and support staff) with the assets necessary for the effective operation of the Information Security Management System; and continually improving our Information Security Management System.
Role Responsibility
The Information Security Assistant / Officer will assist the Information Security Manager with the day to day running of the Information Security Management System to ensure continued certification to the ISO27001 standard.
This will entail:
- Reviewing and implementing, in co-operation with the relevant stake holders, information security policies, procedures and processes.
- Carrying out internal audits of information security controls and processes.
- Rectifying non-conformances in the information security management system and taking corrective action to prevent future occurrences.
- Carrying out and reviewing risk assessments of information assets in co-operation with relevant departments such as IT, Facilities and Human Resources.
- Taking the lead in the treatment of information security risks as required.
- Take the lead in the investigation and recording of information security incidents.
- Working with the Information Security Manager to:
- Determine the need for and roll out internal and external communication related to information security.
- Review Supplier Due Diligence questionnaires and liaise with the procurement function
- Respond to client information security questionnaires and assist with client audits.
- Continually monitor and measure information security controls for effectiveness :
- Ensure information security awareness training is being undertaken to an acceptable level
- Prepare for and assist with ISO27001 surveillance visits, change to approval visits and certificate renewal.
- Provide input into the management review of the information security management system.
- Work with stake holders at all levels of the business to establish information security objectives.
- Provide subject matter expertise on information security to the Data Protection Officer and related groups.
- Carry out day to day operational activities relating to information security
- Undertake any other activities that may be required to support PG&R in their responsibilities and to ensure continued ISO certification.
- Continually improve the information security management system.
- Champion information security throughout the business.
- Travel to offices throughout the country will be required from time to time to carry out audits and to host external audits with our clients and our external certification body.
The Ideal Candidate
- Qualified to a minimum of 5 GCSEs (including a grade C in English and Maths) or equivalent.
- A background in IT or Information Security or experience of managing a similar ISO standard would be preferable however not essential as training will be provided to the right candidate.
- At least two years previous experience of working in a professional environment would be preferable.
- Good IT skills with a knowledge of Microsoft Office packages although further training can be given if required.
- The ability to manage own workload.
- Proactive in driving the role forward.
- Good written and oral skills.
- A good team player who is supportive of others within the team.
- A confident decision-maker.
- Contributes effectively to the overall performance of the team.
- Responds positively to change.
- Flexible and adaptable.
- Good interpersonal skills.
- Focused and analytical.
About the Company
We are a leading international legal business with over 2,500 colleagues and a diverse range of capabilities. We have 11 offices in the UK as well as offices in Dublin, Madrid, Paris, Singapore, Chile, Colombia, Mexico and Miami. We also have associations/alliances with firms in Malaysia, Brazil, Peru, Argentina, Central America, the USA, Australia and Germany.
We are a broad-based commercial firm with a strong heritage in insurance, health and real estate. This is complemented by a fast-growing Business Advisory capability. We represent a wide range of clients, ranging from household names to government departments and NHS bodies. We act for all of the UK’s top-ten insurers, we are market leaders in the provision of strategic, commercial and regulatory advice to providers and commissioners in the health sector, and in real estate we advise all of the UK’s top-12 housebuilders.
We have an impressive legal pedigree, with 142 Chambers UK 2021 practice area and individual lawyer rankings. In Legal 500 UK 2021, the firm received a top tier ranking for 37 of its practice areas, and 58 DACB lawyers were singled out in the ‘Leading Individual' rankings.
Our successes have been recognised by the legal industry and the markets in which we operate. These accolades include two top prizes in the ‘Excellence in Business Development’ and ‘Excellence in Technology & Innovation’ categories of the 2020 Law Society Excellence Awards – the highest accolade for law firms in England & Wales. Our health sector team won the ‘Crisis Management Team of the Year’ award at the 2020 British Legal Awards for its support to the NHS at the onset of the COVID-19 pandemic, and our Cyber & Data Risk team received the ‘Business Development Innovation Award’ at the 2020 Legal Innovation Awards, as well as ‘Cyber Law Firm of the Year’ at the prestigious Insurance Insider Cyber Rankings Awards, for its market-leading suite of digital tools to help our clients prepare for and respond to cyber and data risk crises.
Our vision is to be leading business advisers, recognised for our insight and our outstanding commitment to clients, and for being the place where talented people want to work. For further details on our work and our culture, please visit www.dacbeachcroft.com.
Application Details
At DAC Beachcroft, we don’t just accept your differences we celebrate them. From bespoke solutions for our clients, to treating you like an individual. Our strength comes from your diverse ideas and bringing the whole you to work. So if you’re good at what you do, come as you are. We welcome direct applications and are happy to talk flexible working.
We also want you to be at your very best. Please feel free to let us know of any changes we can make at any point in the recruitment process that will help support your application. If this opportunity sounds of interest to you, please make an application and submit your CV. Your application will be dealt with in the strictest of confidence.
Note for Recruitment Agencies – the DAC Beachcroft recruitment team is responsible for managing all current vacancies through direct hiring and referrals wherever possible. We do work with recruitment agencies and where we require external support we will formally release those vacancies to the agencies on our Preferred Supplier List deemed best placed to assist us. Speculative CVs sent by any agency to any DAC Beachcroft employee without a specific request by the recruitment team will not be accepted and with no introduction fee applicable. Our recruitment team can be contacted at recruitment@dacbeachcroft.com
DAC Beachcroft