Senior Information Security Specialist

Senior Information Security Specialist page is loaded Senior Information Security Specialist Apply remote type Hybrid locations Glasgow (GBS) time type Full time posted on Posted 14 Days Ago job requisition id JR352

The Team

The Cyber Defence/Security Operations Team manages Clyde & Co's global cyber security operations, including Threat & Vulnerability Management and Detection & Response. The team supports secure delivery across the Firm while protecting against evolving cyber threats.

This role will support the development of a 24/7 Detect & Response capability by working with IT, business stakeholders, and third parties to reduce and pre-empt cyber risk.

It's an exciting opportunity to contribute to a high-performing, evolving security function.

Key Responsibilities

Reporting to the Cyber Defence/Security Operations Global Lead, the role supports and enhances security operations across:

Threat & Vulnerability Management

• Configure and monitor endpoint/host-based security tools.

• Identify and manage vulnerabilities; lead mitigation discussions.

• Oversee vulnerability scans and third-party pen tests.

• Track and resolve test findings.

• Stay updated on emerging threats.
  

Incident Detection & Response

• Triage and investigate security incidents.

• Respond to incidents and enhance response capabilities.

• Develop and maintain incident response plans.

• Improve outsourced monitoring value through better use cases and data.

• Lead regular incident response exercises across teams.
  

Threat Hunting

• Use tools like EDR and SIEM to identify threats and indicators of compromise.

• Analyse attacker tactics and recommend security improvements.
  

Security Reporting

• Define and report security metrics.

• Evaluate control effectiveness and identify improvements.

• Communicate emerging risks and lead compliance checks.
  

Cyber Defence Transformation

• Support cyber strategy and risk mitigation plans.

• Contribute to policy and standard development.

• Define secure configurations for key technologies.

• Promote secure practices within IT operations.
  

Skills & Experience

• Strong incident triage and investigation experience.

• Skilled in endpoint security tools and vulnerability management.

• Solid understanding of EDR, SIEM, IDS/IPS, Firewalls, and cloud security.

• Ability to write KQL queries and develop SIEM use cases.

• Good grasp of security best practices and patching standards.

• Experience managing third-party security vendors.

• Strong knowledge of cyber threats, trends, and security standards.

• Excellent written and verbal communication.

• Legal industry experience a plus.
  

Education

• Relevant certifications (e.g. CISSP, SSCP, CCSP, Security+).

• Familiarity with ISO/IEC 27001, Cyber Essentials, NIST CSF, or equivalent frameworks.
  

What sets this role apart

You'll be joining aglobal teamthat thrives on collaboration and innovation. We work withindustry-leading toolslike CrowdStrike and Microsoft's security suite, giving you access to the best technology in the business.

We're open to new ideas and encourage everyone to bring fresh thinking to the table. Whether it's a new control, a smarter process, or a better way to communicate risk-we want to hear it.

Our mantra is simple:anticipate and avoid. We're constantly scanning the horizon for emerging threats, and we need someone who's dynamic enough to spot them, shape the response, and help us stay one step ahead.

What you'll get

• A brand-new, modern office space in the heart of Glasgow

• Hybrid working model with a minimum of two days in-office

• Life assurance from day one

• Season ticket loans and lifestyle discounts

• An annual Wellbeing Day to recharge

• 24/7 Employee Assistance Programme

• Dedicated Learning & Development support

• Opportunities to collaborate with international teams across our global network

• Pathways for career progression and personal growth

Please note: eligibility for benefits may vary based on location and length of service. Full details will be confirmed upon joining.

Our commitment

We're proud of our inclusive culture. Diversity is central to who we are, and we're committed to creating an environment where everyone can thrive. At Clyde & Co, you'll find a place to belong.

We're also leading the way in sustainability. Our goal is to halve emissions by 2030 and reach net zero by 2040-part of our broader commitment to environmental responsibility.

Apply with confidence

Research shows that some candidates hesitate to apply unless they meet every requirement. At Clyde & Co, we value potential and drive. If this role excites you and you believe you could grow into it, we encourage you to apply.

When you work at Clyde & Co, you join a team of 490 partners, 2,400 lawyers, 3,200 legal professionals and 5,500 people in nearly 70 offices and associated offices worldwide. Our values are the principles that guide the decisions we make, unite us in our endeavours and strengthen our delivery, for both our clients and our firm. We work as one, excel with clients, celebrate difference and act boldly. We are committed to operating in a responsible way by progressing towards a diverse and inclusive workforce that reflects the communities and clients it serves. We are devoted to providing an environment in which everyone can realise their potential, using its legal and professional skills to support its communities. We do this through pro bono work, volunteering and charitable partnerships, and minimising the impact it has on the environment, including through our commitment to the SBTi Net-Zero standard and the setting of ambitious emissions reduction targets.

We offer a range of tailored benefits and support, including healthcare, retirement planning and wellbeing initiatives.

Clyde & Co is proud to be an equal opportunities employer. Our core values encourage us to support fairness, celebrate diversity and prohibit all forms of discrimination in the workplace to allow everyone to excel at work. Therefore, we welcome and encourage all applications from suitably qualified individuals, regardless of background or identity.
Please take a moment to read our privacy notice carefully. This describes what personal information Clyde & Co (we) may hold about you, what it's used for, how it's obtained, your rights and how to contact us as a data subject.

If you are submitting a candidate as a Recruitment Agency Partner, it is an essential requirement and your responsibility to ensure that candidates applying to Clyde & Co are aware of this privacy notice.