Information Security Officer

Linklaters•New York, NY

1d•$125,000 - $160,000

About The Position

Key Responsibilities Responsible for delivering the programme/plans to ensure the Firm’s information assets are adequately protected. Duties will include some or all of the following: Act as a trusted advisor on Information Security related activities. Deliver programmes and processes to reduce information security risk and strengthen the Firm's security posture. Monitor, measure and report on the effectiveness of information security measures. Identify any trends that may require further action e.g. improved security awareness, updated controls etc. Manage responses to audit requests from clients and external auditors. Assist Business Development with pitch responses as required. Support the operation of the ISMS and maintain ISO27001 and Cyber Essentials certifications. Assist with periodic monitoring of audit logs in accordance with requirements and report findings and concerns for further analysis and action. Assist with supply chain due-diligence assessments. Perform internal investigations and data discovery exercises in support of Legal & Risk, HR and outside counsel. Collaborate with the wider Technology & Data teams to ensure security best practices are integrated into system designs and configurations. Qualifications & Experience Degree-level qualifications in computer science, information security, or a related field, or equivalent professional experience. Relevant professional certifications, such as CISSP, CompTIA Security+, or equivalent, are desirable. Proven experience in implementing, managing, and maintaining cyber security programmes within a complex organisation. Demonstrable knowledge of information security frameworks, risk management, and technical security best practices. Strong ability to interpret, apply, and communicate technical security requirements in a clear, business-focused manner to both technical and non-technical audiences. Experience collaborating effectively across multi-disciplinary teams. Familiarity with legal, regulatory, and compliance requirements relevant to information security in global organisations. Excellent analytical, organisational, and reporting skills, with a proactive approach to solving problems and improving security processes. The base salary range offered for this role will be between $125,000 and $160,000 and represents the firm’s good faith and reasonable estimate of the range of possible compensation at the time of posting. Actual compensation will be dependent upon a number of factors, including but not limited to, the candidate’s relevant experience, performance, qualifications, degrees and location, as well as the needs of the firm. The total compensation package for this position may include overtime pay, discretionary bonuses and other benefits. Technical Skills: This list of duties and responsibilities above is not exhaustive. It is intended to describe the general content of, and requirements for, the performance of this job. As such, the role may also include the undertaking of additional tasks as required. This is the place where talent meets opportunity and where passion meets purpose. At Linklaters, the work we do means carving a path through unexplored territory, working on complex legal matters, across jurisdictions and borders and providing outstanding service and confidence to our clients. Having the vision to see things differently and the determination to deliver excellence, every time. That’s what makes us who we are. You can see your true potential connecting with dynamic colleagues all over the world, united by purpose and shared values and working together as one inclusive, collaborative team. With second to none training and support, this is the place where you meet your future. This is Linklaters. Be alert to fictitious job opportunity posts and offers of employment which claim to be in the name of Linklaters. We have been made aware of various recruitment-related scams which ask for upfront payments, for example, for office equipment and promise start up bonuses and reimbursement in return for such payments. These scams often involve the use of email addresses similar to a genuine domain name. Genuine emails from Linklaters only use the domain of “@linklaters.com”. We will never ask you to make payments for office equipment or otherwise as part of our recruitment process. If you are in doubt about a job opportunity that appears to relate to our firm, please get in touch using the contact details on our careers website at www.linklaters.com/careers. In the event that we make an offer to you, and where local legislation permits, we will conduct pre-engagement screening checks that may include but are not limited to your professional and academic qualifications, your eligibility to work in the relevant jurisdiction, any criminal records, your financial stability and references from previous employers. Your offer will be subject to the successful completion of these checks which will be initiated following your consent. As a responsible business, it is important that we represent the diversity of our people, our clients and our communities. We know that diversity makes us a better law firm and helps us attract the best talent, drive innovation with diversity of thought, and deliver the best experience to everyone who comes into contact with us. We recruit on the basis of merit, irrespective of age, disability, gender, gender identity, race or ethnicity, marital status, religion, sex, sexual orientation or any other status protected by the laws or regulations in the locations where we operate. Selection decisions, and the reasons for those decisions, are recorded at each stage of the selection process. Selection criteria and, where appropriate, technical skills tests are in place to measure an individual’s ability for the safe and effective performance of a job. Those involved in recruitment and selection decisions and processes are also provided with guidance on diversity issues. If you require reasonable adjustments to be made during the selection process, please talk to a member of the recruitment team so that any required adjustments can be made in advance. Specific experience requirements advertised on a role do not intend to preclude applications from candidates who may have more or less experience. Our intention is only to indicate a guideline as to the necessary skills for the role as described.

Requirements

Degree-level qualifications in computer science, information security, or a related field, or equivalent professional experience.
Proven experience in implementing, managing, and maintaining cyber security programmes within a complex organisation.
Demonstrable knowledge of information security frameworks, risk management, and technical security best practices.
Strong ability to interpret, apply, and communicate technical security requirements in a clear, business-focused manner to both technical and non-technical audiences.
Experience collaborating effectively across multi-disciplinary teams.
Familiarity with legal, regulatory, and compliance requirements relevant to information security in global organisations.
Excellent analytical, organisational, and reporting skills, with a proactive approach to solving problems and improving security processes.

Nice To Haves

Relevant professional certifications, such as CISSP, CompTIA Security+, or equivalent, are desirable.

Responsibilities

Responsible for delivering the programme/plans to ensure the Firm’s information assets are adequately protected.
Act as a trusted advisor on Information Security related activities.
Deliver programmes and processes to reduce information security risk and strengthen the Firm's security posture.
Monitor, measure and report on the effectiveness of information security measures.
Identify any trends that may require further action e.g. improved security awareness, updated controls etc.
Manage responses to audit requests from clients and external auditors.
Assist Business Development with pitch responses as required.
Support the operation of the ISMS and maintain ISO27001 and Cyber Essentials certifications.
Assist with periodic monitoring of audit logs in accordance with requirements and report findings and concerns for further analysis and action.
Assist with supply chain due-diligence assessments.
Perform internal investigations and data discovery exercises in support of Legal & Risk, HR and outside counsel.
Collaborate with the wider Technology & Data teams to ensure security best practices are integrated into system designs and configurations.