Norton Rose Fulbright Careers

Job Description

Senior Information Security Engineer

Job Location

London

Practice Group/Department

Information Technology

Role

Business Services

Job Title

Senior Information Security Engineer

Work Type

Full Time

Description

We're Norton Rose Fulbright - a global law firm with over 50 offices and 7,000 employees worldwide.

Our Newcastle Office is currently recruiting for a Senior Information Security Engineer.As well as the relevant skills and experience, we're looking for people who are innovative, commercial and value the work that they do. We celebrate multiple approaches and points of view and believe diversity drives innovation, so we're building a culture where difference is valued.

The Team:

The scope of the Information Security function includes all strategic security planning and control oversight to ensure effective risk mitigation takes place within the firm. The Information Security team implements and operates a number of security solutions directly, such as anti-malware solutions, Internet security proxy servers, and the vulnerability scanning platform, and rely on other departments (IT service delivery, HR, Facilities) to operate all other security controls.

The Information Security team is responsible for ensuring the overall effectiveness of the control framework and managing security incidents. The team work with unified principles and processes around the world while maintaining regional stakeholder relationships. They adhere to the international standard ISO 27001, and report to the Firm's Chief Information Security Officer.

The Role:

• Provide technical leadership and subject matter expertise of the Firm's security solutions.
• Provide security product ownership and maintenance of tools such as next generation anti-virus / EDR, web filtering, vulnerability scanning, and privileged access management solutions.
• Continually improve the teams visibility into the security posture of on premise and cloud infrastructure; provide associated data and risk records as appropriate.
• Assist with remediation of weak controls as necessary, either technically or through influence.
• Assist with the definition of standards, policies, designs and apply control governance where necessary as a preventative measure.
• Ensure that the Firm has the requisite capability to investigate, prevent and remediate against security breaches, viruses and deviations from security procedures.
• Participate in post-mortem investigations of Information Security incidents while preparing report documents illustrating the findings and lessons learned.
• Propose security controls to mitigate identified risks, while improving ongoing operations and incident response processes. Using the risk management process effectively.
• Act as a technical point of escalation.
• Maintain effective working relationships with a variety of internal stakeholders.
• Mentor to junior team members.

Skills and Experience Required:

• Bachelor's degree in a related discipline (Computer Science, Information Systems Management, Engineering, or similar)
• Minimum 5 years of experience in a related security field.
• Previous Network Engineering or Systems Administration background (preferred).
• Deep technical understanding of security products, including web filtering, next generation antivirus/ EDR, and vulnerability management tools.
• Ability to rapidly adapt to change and absorb new technologies.
• Ability to lead troubleshooting in complex environments and provide technical recommendations to solve short and long term issues.
• Strong knowledge of the security landscape (attack vectors, tooling, best practices for assessment, mitigation, remediation and governance).
• Track record of delivering high quality solutions througha project delivery or ongoing continual improvement in an operational role.
• Working knowledge of Authentication protocols, and Identity Access Management technologies such as SSO and MFA.
• Familiarity with security best practices and risk management operating in cloud environments such as Azure (required), GCP and AWS (nice to have), and in other 3rd party SAAS platforms.
• Knowledge of Information Security standards such as ISO27001, NIST, CIS.

Our clients come first and whilst we have a high performance culture and work hard as a team, in return we offer range of competitive benefits including:

• 25 days hols + Bank hols - Buy up to 5 days
• GP Service
• Bupa Healthcare
• Pension
• Flexible working

In addition, we are proud of our established health and wellbeing programme which supports our employees through mental, physical and lifestyle challenges.

Norton Rose Fulbright is committed to promoting a diverse workforce and an inclusive workplace where everyone can realise their full potential and career ambitions on the basis of merit and skill. We are open to flexible working practices, and will support you in effectively managing your work and personal commitments. We offer a range of family friendly and inclusive employment policies, flexible working arrangements, and employee networks. Find more about Diversity and Inclusionhere.

Norton Rose Fulbright is an equal opportunities employer. We will make reasonable adjustments to our application process to ensure that you have the best chance of success. We understand that there's not a "one size fits all" approach to adjustments so our team will work with you individually to understand more about your requirements. Please contact our Recruitment team onEMEARecruitment@nortonrosefulbright.com

#LI-Hybrid

#LI-SC1

Apply

Not currently receiving applications. For agency users and internal applicant, please login.