{"id":2458632,"url":"https://alion.io/job/clyde-co-information-security-specialist","title":"Information Security Specialist","company":{"id":1761849,"name":"Clyde & Co","domain":"clydeco.com","url":"https://alion.io/company/clydeco-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Glasgow, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":71000,"max_usd":131000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":29},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Machine Learning","optional":false},{"name":"Microsoft Excel","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Power BI","optional":false},{"name":"SharePoint","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-08T00:00:00Z","employer_posted_date":"2026-09-08","last_verified_at":"2026-10-13T18:49:21Z","board_verified":true,"closed_at":null,"days_open":36,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":36},"description":"Department: Information Security\nLocation: Glasgow\nContract Type: Permanent\nRole: Information Security Specialist\nKey Responsibilities\nTraining, Awareness & Human Risk\nThe chosen candidate will be accountable for the successful delivery and continuous improvement of Clyde & Co's security awareness programme, owning the relationship with training providers, developing engaging content and partnering with stakeholders across the firm to drive behavioural change and strengthen the firm's security culture\nLead the design, implementation and continuous improvement of the firm’s security awareness and human-risk management programme ensuring all content remains relevant, engaging, and aligned with emerging cyber threats, industry best practices, and firm-specific risks. The chosen candidate will:\nManage enterprise phishing simulation campaigns, awareness training initiatives and behavioural change activities to improve security culture and reduce cyber risk.\nCoordinate the delivery of annual security campaigns including Cyber Security Awareness Month (CSAM), mandatory training activities and targeted awareness initiatives.\nMonitor emerging threats, industry practices and security awareness trends, recommending improvements to strengthen organisational resilience and human-risk management capabilities.\nMaintain and manage initiative plans, milestones, dependencies and reporting for assigned security improvement programmes.\nOwn and maintain strong a productive relationship with external vendors to ensure the quality, effectiveness and continuous improvement of awareness and training services.\nMonitor vendor performance against agreed service levels, success metrics, and contractual commitments, driving improvements where required.\nProduce tailored management reports, dashboards and presentations for senior leaders, providing meaningful insights into programme performance, compliance levels, user behaviour and areas of risk.\nPartner with senior stakeholders to increase engagement, improve training completion rates and promote a strong security culture throughout the firm.\nPresent findings, recommendations, and programme updates to management in a clear, concise and business-focused manner.\n Supply Chain Risk and Supplier Assurance\nThe chosen candidate will be responsible for maintaining effective oversight of Clyde & Co's third-party security risk exposure, providing proactive insight into emerging supply chain threats and vulnerabilities and ensuring the firm's supplier assurance processes remain current, risk-based and aligned to the firm’s IT&O Risk Management Framework. The role acts as a key advisor to the business, helping stakeholders understand and manage risks arising from the firm's external supplier ecosystem. The candidate will:\nMaintain, execute and enhance third-party and supply chain security risk management processes including tiering of suppliers by risk, periodic and ad hoc third-party information security assessments (TPISA) and ongoing assurance activities.\nDesign and operate supplier security assessment mechanisms, including contractual security schedules, supplier risk questionnaires, attestations and contract review processes.\nManage information security within the supplier relationship throughout the lifecycle, ensuring that supply chain risks, control deficiencies and remediation actions are identified, tracked and addressed in a timely manner.\nCollaborate with Information Security, IT, Procurement, Risk Management, Legal and business stakeholders to ensure security requirements are integrated into operational processes and supplier engagements. \nMonitor, analyse, and assess emerging supply chain security threats, industry trends, regulatory developments, geopolitical risks, and third-party security incidents to identify risks that may impact Clyde & Co's supply chain.\nDevelop and maintain a comprehensive understanding of Clyde & Co's supplier estate, identifying areas of concentration risk, systemic risk, fourth-party dependencies, and critical supplier exposures.\nContinuously evaluate and improve third-party risk management processes, methodologies, assessment frameworks, and assurance activities to ensure they remain effective, proportionate, and aligned to the firm's risk appetite and evolving threat landscape.\nEstablish and maintain meaningful assurance activities over key(critical) suppliers through the review of independent audits, certifications, penetration test summaries, security attestations, performance metrics, and other relevant evidence.\nEmail DLP and Information Protection\nTo continuously enhance Clyde & Co's Email DLP and Information Protection capabilities, ensuring the firm's confidential, sensitive, and client information is protected through effective preventative, detective, and responsive controls while enabling secure business operations and collaboration. The candidate will:\nIn conjunction with the Risk department, continue the development and enhancement of email DLP capabilities and the associated rulesets to help reduce the risk of unauthorised disclosure or loss or misuse of firm and client information.\nWork with the Risk department, IT, InfoSec and other business stakeholders to assess data protection risks and define appropriate email DLP policies, effective alerting and monitoring and control requirements.\nSupport the review, tuning and improvement of DLP alerts, policies and control effectiveness, ensuring that DLP capabilities remain proportionate, risk-based and aligned with business operations.\nTrack DLP issues, exceptions, policy impacts and improvement actions, escalating material risks or control decisions through the appropriate governance channels.\nSupplier Relationship Management\nConduct periodic service and security review meetings with strategic suppliers to keep abreast of new developments and updates, assess performance against agreed requirements, contractual obligations and risk tolerances.\nInternal Audit\nSupport the successful renewal and ongoing maintenance of Clyde & Co's Cyber Essentials, Cyber Essentials Plus, and ISO 27001 certifications by coordinating evidence collection, tracking remediation activities, engaging stakeholders and assisting with audit requirements.\nReporting, Governance and Continual Improvement\nFacilitate/establish and report on monthly metrics and Key Performance/Risk Indicators relating to third party/supply chain risk, human-risk, training/awareness and DLP.\nProduce management reporting, metrics and risk insights to demonstrate programme effectiveness and support governance decision-making.\nFacilitate continual improvement by investigating and utilising latest technologies such as Artificial Intelligence/Machine Learning and other process methodologies to help transform the delivery of the services with a focus on greater efficiency and accuracy.\nStay abreast of technical, industry, regulatory and company changes and/or trends as they relate to cyber security, the legal industry, information management, InfoSec, technological standards/trends and IT efficiencies.\nStakeholder Engagement and Team Contribution\nSupport security-related market assessments, supplier evaluations, proof-of-value activities, and procurement processes by providing subject matter expertise, requirements gathering, user feedback, and evaluation criteria where required.\nContribute to the development of business cases, executive recommendations and decision-support materials for security improvement initiatives.\nAnalyse insights and trends from security awareness activities, phishing simulations, user feedback, and third-party risk assessments, translating findings into actionable recommendations to improve security controls, processes and user behaviours.\nWork closely with Information Security, IT & Operations, Risk, Procurement, and business stakeholders to ensure security findings, lessons learned, and improvement opportunities are shared, acted upon and tracked through to resolution.\nProvide ongoing security education, guidance and best practice advice to IT teams and business stakeholders.\nSupport wider Information Security team activities during periods of increased demand, project delivery, or where additional resource is required.\nEssential Skills and Experience\nProven experience of working in an Information Security and IT Risk Management role within a fast-paced environment. At least 5 years experience within the legal industry is ideal, but not essential.\nOperational knowledge of one or more international information security standards, risk management and control frameworks/practices e.g. ISF SOGP, ISO27001/2, ISO31000, IRAM2, NIST 800-53 or CSF and SOC2 reporting.\nDemonstrable experience of having worked with one or more of the following: - Third Party Risk Management/Vendor Risk Management (TPRM/VRM) systems such as Mitratech Prevalent, Onetrust, Panorasys etc. - Learning and development platforms offering both traditional course content and phishing and where available other xx-ishing capabilities (Proofpoint, Knowbe4, Hoxhunt or equivalent) - Email or wider DLP platforms (Proofpoint Tessian, KnowBe4 Egress, Mimecast, Abnormal) - AI based content/avatar creation/management applications (Synthesia, Colossyan or equivalent)\nStrong organisational skills and the ability to handle multiple conflicting priorities.\nAble to work to very tight deadlines under pressure and to assimilate information quickly.\nStrong interpersonal and stakeholder engagement skills, with the confidence, positivity and credibility to build effective relationships quickly across all levels of the Firm.\nAbility to adapt communication style and messaging to suit diverse audiences, including senior executives, partners, business stakeholders, end users, and technical teams, translating complex information into clear, meaningful, and actionable outcomes\nAn advanced familiarisation of electronic support tools such as Microsoft Excel, PowerPoint.\nA good working knowledge of electronic reporting and dashboard technologies such as Sharepoint, PowerBI is preferred but not essential.\nExcellent verbal and written communication skills, with the ability to explain operational concepts and technical terms in a way that non-technical people would understand.\nDemonstrates attention to detail with a high level of accuracy.\nThe Firm\nWhen you work at Clyde & Co, you join a team of 500 partners, 2,400 lawyers, 3,200 legal professionals and 5,500 people in nearly 70 offices and associated offices worldwide. Our values are the principles that guide the decisions we make, unite us in our endeavours and strengthen our delivery, for both our clients and our firm. We work as one, excel with clients, celebrate difference and act boldly. We are committed to operating in a responsible way by progressing towards a diverse and inclusive workforce that reflects the communities and clients it serves. We are devoted to providing an environment in which everyone can realise their potential, using its legal and professional skills to support its communities. We do this through pro bono work, volunteering and charitable partnerships, and minimising the impact it has on the environment, including through our commitment to the SBTi Net-Zero standard and the setting of ambitious emissions reduction targets.\nOur Commitment\nClyde & Co is proud to be an equal opportunities employer. Our values encourage us to support fairness, celebrate diversity and prohibit all forms of discrimination in the workplace to allow everyone to excel at work. Therefore, we welcome and encourage all applications from suitably qualified individuals, regardless of background or identity. Learn more about our interview process.\nA Note on Privacy\nPlease take a moment to read our privacy notice. This describes what personal information Clyde & Co (we) may hold about you, what it’s used for, how it’s obtained, your rights and how to contact us as a data subject.\nIf you are submitting a candidate...","description_format":"text","description_chars":12342,"description_truncated":true,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Legal Services"],"lifecycle":[{"event":"open","at":"2026-10-13T16:41:22Z"}],"visa":[],"liveness":{"score":28,"band":"fade","label":"Fading","p_open":1,"p_active":0.627,"p_room":0.45,"age_days":36,"expected_fill_days":22,"reasons":["conf:11","win:tail","comp:brand"],"computed_at":"2026-10-14T05:58:20Z"},"pay":null,"html_url":"https://alion.io/job/clyde-co-information-security-specialist","json_url":"https://alion.io/job/clyde-co-information-security-specialist.json","meta":{"generated_at":"2026-10-14T05:58:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7620,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1761849},"rest":"https://alion.io/mcp/rest/get_company?id=1761849"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclyde-co-information-security-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclyde-co-information-security-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclyde-co-information-security-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/clyde-co-information-security-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclyde-co-information-security-specialist"}]}