Cyber Security Analyst / Lead (Hybrid, London)

About the role

Join Chambers and Partners as a Cyber Security Analyst/Lead, driving the design, implementation and continuous improvement of the organisation's information security programme. This hybrid role combines hands‑on technical work with strategic leadership to protect systems, data and digital assets against evolving threats.

Key responsibilities

• Develop, implement and maintain the information security strategy, policies, standards and procedures.
• Lead the creation and maintenance of an ISO 27001‑based Information Security Management System (ISMS).
• Conduct regular security risk assessments, identify vulnerabilities and recommend mitigation actions.
• Oversee day‑to‑day operation of firewalls, IDS/IPS, antivirus/anti‑malware, SIEM, vulnerability scanners and encryption solutions.
• Manage vulnerability management programmes, including scanning, penetration testing and remediation.
• Lead incident response activities from detection through post‑incident review.
• Develop disaster recovery and business continuity plans related to information security.
• Ensure compliance with regulations and standards such as HIPAA, PCI DSS, NIST, CIS, ISO 27001 and Cyber Essentials+.
• Coordinate internal and external security audits and drive remediation of findings.
• Deliver security awareness training and embed security into IT, cloud and infrastructure design.

Required profile

• Hands‑on experience developing and implementing information security strategies.
• Proven ability to lead an ISMS based on ISO 27001.
• Experience conducting security risk assessments and managing vulnerability programmes.
• Strong knowledge of incident response processes and business continuity planning.

Required skills

• Firewalls
• IDS/IPS
• Antivirus / anti‑malware
• SIEM (Security Information and Event Management)
• Vulnerability scanners
• Data encryption solutions
• ISO 27001
• HIPAA
• PCI DSS
• NIST framework
• CIS controls
• Cyber Essentials+
• Penetration testing
• Cloud platforms: Azure, AWS, GCP
• Identity management (Entra ID / Azure AD)