Security and Compliance Analyst

Select how often (in days) to receive an alert:
Create Alert

Department: Technology
Location: London
Duration: Permanent
Reports to
:
Head of Information Security UKIME
Reference no.: 9424

Dentons' Information Security Team sits at the heart of protecting the Firm’s reputation and strengthening client trust. We provide assurance, confidence, and credibility in an increasingly complex risk landscape. We lead client audits, and rigorously assess third-party vendors, demonstrating to clients that we take security seriously and operate to the highest standards.

The team partners closely with senior leaders, IT, and business teams to embed security into everything we do, turning complex regulatory requirements into practical, business-friendly solutions. Our work helps the firm win new business, retain major clients, and operate with confidence in a world where information security is critical.

As a Security & Compliance Analyst, you will work independently and confidently, building strong relationships with senior stakeholders including Partners and the Office of the General Counsel. Combining technical expertise with first-class communication skills, you’ll translate complex security requirements into clear, practical guidance while shaping key processes and ensuring the firm meets the highest international standards.

• Develop and enhance firmwide practices to ensure security controls align with ISO standards and client expectations.
• Support the development, implementation, and communication of security policies alongside the Head of Information Security and IT Director.
• Lead and manage the client audit process, including responding to tenders and security questionnaires, ensuring timely review and action.
• Oversee the vendor assurance process, assessing third parties against the firm’s risk profile using established tools.
• Build strong relationships with key stakeholders, including the Office of General Counsel and Partner-level executives, to effectively manage audit and compliance requirements.
• Act as a subject matter expert on the firm’s information security governance framework, responding to internal and external queries.
• Provide practical advice and guidance on information security, compliance, and regulatory matters.
• Participate in regional and global security and compliance forums.
• Identify, monitor, and raise awareness of emerging client and risk-related issues.
• Analyse data related to information security, providing insight and informing the activities of the wider team.
• Support security risk assessments for new systems, embedding information security into IT projects at every stage.
• Assist in maintaining the regional information security risk register.

Technical Skills

• Strong understanding and experience of client audit processes within the legal or professional services sector.
• Proven experience managing and maintaining an ISO 27001 ISMS.
• Sound knowledge of data handling best practices, information governance, and data management principles.
• Good understanding of cross-border data regulations, including GDPR and EU data privacy requirements.
• Familiarity with additional security frameworks such as NIST CSF and CIS (desirable).
• Up-to-date awareness of cyber threats, phishing techniques, vulnerabilities, breach trends, and governance developments.
• Experience contributing to security awareness initiatives to enhance employee understanding and compliance.
• Ability to review and improve internal processes to ensure confidentiality, integrity, and availability of information.

Personal Skills & Attributes

• Excellent written and verbal communication skills, with confidence engaging at client, partner and senior leadership level.
• Self-motivated, proactive, and results-driven.
• Strong ability to collaborate with stakeholders across the business, beyond IT.
• Highly developed stakeholder management and influencing skills, both internally and externally.
• Strong organisational skills with the ability to prioritise effectively in a fast-paced environment.
• Effective project management skills to deliver security improvements against defined targets…