Senior Information Security Specialist

Type: Full Time
Duration: Permanent
Location: Glasgow
Working Pattern: +2 days working from the office, 3 days remote
Department: Information Security

We are looking for a Cyber Defence / Senior Information Security Specialist to support and enhance Clyde & Co’s global security operations capability. This role will play a key part in maturing our cyber defence function, working closely with IT, business stakeholders, and third parties to prevent, detect, and respond to cyber threats across the firm.

The Cyber Defence / Security Operations Team manages Clyde & Co’s global cyber security operations, covering threat and vulnerability management, monitoring, and incident response. The team operates a balanced model combining security operations with product delivery and stakeholder commitments, with a focus on building a robust 24/7 detection and response capability.

• Configure, manage and monitor endpoint/host-based security tools
• Identify and manage vulnerabilities to minimise risk exposure
• Lead vulnerability reporting and discussions within governance forums
• Support penetration testing activities and remediation efforts
• Stay up to date with emerging threats and security intelligence

• Triage, investigate and escalate security incidents
• Respond to cyber incidents and enhance defensive capabilities
• Develop and implement incident response plans
• Optimise outsourced security monitoring services
• Deliver incident response exercises for technical teams and leadership

• Use SIEM and EDR tools to identify indicators of compromise
• Proactively identify and mitigate potential threats
• Analyse attacker tactics, techniques and procedures (TTPs)
• Recommend improvements to security controls following investigations

• Define and report on key security metrics and risk exposure
• Assess effectiveness of technical security controls
• Communicate risks, trends and emerging threats
• Conduct security reviews and compliance checks

• Support delivery of cyber security strategy and risk mitigation plans
• Contribute to security policy development and improvement
• Define technical security standards and hardening practices
• Ensure secure operational procedures across IT teams

• Opportunity to shape and mature a global security operations capability
• Exposure to a broad range of cyber security disciplines and technologies
• Close collaboration with global stakeholders and leadership
• Ability to influence strategy, controls, and operational standards

• Modern, flexible working – minimum 2 days in the office, 3 from home
• Join an award-winning global firm recognised by Chambers and Legal 500
• Career progression and development with structured learning and global mobility opportunities
• Inclusive culture with strong DEI, pro bono and sustainability initiatives
• Benefits including life assurance, wellbeing support, discounts, Employee Assistance Programme and more

The Firm

When you work at Clyde & Co, you join a team of 500 partners, 2,400 lawyers, 3,200 legal professionals and 5,500 people in nearly 70 offices and associated offices worldwide. Our values are the principles that guide the decisions we make, unite us in our endeavours and strengthen our delivery, for both our clients and our firm. We work as one, excel with clients, celebrate difference and act boldly. We are committed to operating in a responsible way by progressing towards a diverse and inclusive workforce that reflects the communities and clients it serves. We are devoted to providing an environment in which everyone can realise their potential, using its legal and professional skills to support its communities. We do this through pro bono work, volunteering and charitable partnerships, and minimising the impact it has on the environment, including through our commitment to the SBTi Net-Zero standard and the setting of ambitious emissions reduction targets.

Our Commitment

Clyde & Co is proud to be an equal opportunities employer. Our values encourage us to support fairness, celebrate diversity and prohibit all forms of discrimination in the workplace to allow everyone to excel at work. Therefore, we welcome and encourage all applications from suitably qualified individuals, regardless of background or identity. Learn more about our interview process.

A Note on Privacy

Please take a moment to read our privacy notice. This describes what personal information Clyde & Co (we) may hold about you, what it’s used for, how it’s obtained, your rights and how to contact us as a data subject.

If you are submitting a candidate as a Recruitment Agency Partner, it is an essential requirement and your responsibility to ensure that candidates applying to Clyde & Co are aware of this privacy notice.

This is the job description as constituted at present; however, Clyde & Co reserves the right to reasonably amend it in accordance with the changing needs of the business.