Analyst, Privacy & Information Security
Core
Support the delivery of the firm's security, privacy, risk, and compliance programs across Australia and Asia, focusing on governance and regulatory adherence rather than technical operations.
Role type
Governance and compliance-focused Information Security & Privacy Analyst
Builds
Global privacy program, ISO 27001 certification activities, and security management systems (ISMS)
Domain
Legal services, Information Security, Privacy, Risk Management, Compliance
Deliverable
Dashboards & analysis
Required skills
Risk assessment, ISO 27001 framework knowledge, Privacy and data protection regulations, Stakeholder management, Communication, Process improvement, Regulatory monitoring
Preferred skills
Professional certifications (CISA, CISM, CISSP, CIPM, CIPP/E), Experience in professional services, Knowledge of emerging technologies and AI
Technologies
ISO 27001, Information Security Management Systems (ISMS)
Responsibilities
Support client security and privacy requests, audits, and certification activities; Conduct and support security and privacy risk assessments; Assess compliance with client-specific security and privacy requirements; Support the delivery of the firm's global privacy program; Monitor and manage user behaviour and data leakage alerts; Deliver security and privacy training and communications; Provide practical security and privacy guidance to stakeholders; Help embed security and privacy controls into business processes; Monitor emerging security, privacy, regulatory, and client requirements
Seniority
Mid-level, hands-on IC