Senior Information Security Specialist

Type: Full Time

Duration: Permanent

Location: Glasgow

Working Pattern: +2 days working from the office, 3 days remote

Department: Information Security

We are looking for a Cyber Defence / Senior Information Security Specialist to support and enhance Clyde & Co’s global security operations capability. This role will play a key part in maturing our cyber defence function, working closely with IT, business stakeholders, and third parties to prevent, detect, and respond to cyber threats across the firm.

The Cyber Defence / Security Operations Team manages Clyde & Co’s global cyber security operations, covering threat and vulnerability management, monitoring, and incident response. The team operates a balanced model combining security operations with product delivery and stakeholder commitments, with a focus on building a robust 24/7 detection and response capability.

• Configure, manage and monitor endpoint/host-based security tools
• Identify and manage vulnerabilities to minimise risk exposure
• Lead vulnerability reporting and discussions within governance forums
• Support penetration testing activities and remediation efforts
• Stay up to date with emerging threats and security intelligence

• Triage, investigate and escalation security incidents
• Respond to cyber incidents and enhance defensive capabilities
• Develop and implement incident response plans
• Optimise outsourced security monitoring services
• Deliver incident response exercises for technical teams and leadership

• Use SIEM and EDR tools to identify indicators of compromise
• Proactively identify and mitigate potential threats
• Analyse attacker tactics, techniques and procedures (TTPs)
• Recommend improvements to security controls following investigations

• Define and report on key security metrics and risk exposure
• Assess effectiveness of technical security controls
• Communicate risks, trends and emerging threats
• Conduct security reviews and compliance checks

• Support delivery of cyber security strategy and risk mitigation plans
• Contribute to security policy development and improvement
• Define technical security standards and hardening practices
• Ensure secure operational procedures across IT teams

• Opportunity to shape and mature a global security operations capability
• Exposure to a broad range of cyber security disciplines and technologies
• Close collaboration with global stakeholders and leadership
• Ability to influence strategy, controls, and operational standards

• Modern, flexible working – minimum 2 days in the office, 3 from home
• Join an award‑winning global firm recognised by Chambers and Legal 500
• Career progression and development with structured learning and global mobility opportunities
• Inclusive culture with strong DEI, pro bono and sustainability initiatives
• Benefits including life assurance, wellbeing support, discounts, Employee Assistance Programme and more

Clyde & Co is proud to be an equal opportunities employer. Our values encourage us to support fairness, celebrate diversity and prohibit all forms of discrimination in the workplace to allow everyone to excel refore, we welcome and encourage all applications from suitably qualified individuals, regardless of background or identity.