IT Cyber Security Specialist

We are recruiting for an experienced IT Cyber Security Specialist to join the IT Infrastructure Engineering Team, part of the Technology Department within the wider Business Services function, based at the firm's head office in London. For more information and to view the job description, please click here.

Full job description (attached PDF)

Role overview

We are recruiting for an experienced IT Cyber Security Specialist to join the IT Infrastructure Engineering Team, part of the Technology Department within the wider Business Services function, based at the firm's head office in London.

The team is responsible for the security, and continual improvement of the firm's global IT infrastructure, systems, and cybersecurity capabilities, working closely alongside the Infrastructure Operations Team, which manages day-to-day service delivery and support.

As a project, engineering, and security-focused function, the Infrastructure Engineering Team delivers technology projects and programmes, as well as driving strategic infrastructure and cybersecurity enhancements across the firm's global offices.

Reporting to the IT Infrastructure Engineering Manager, the IT Cyber Security Specialist is a key technical role responsible for the ownership and continual development of the firm's cybersecurity controls and security architecture. The successful candidate will develop security policies, identify and mitigate vulnerabilities, investigate security incidents, and lead the response and resolution of major cyber incidents, helping to ensure the firm's technology environment remains secure, resilient, and aligned to business needs.

Key responsibilities

The key responsibilities of this role are set out below and there may be others which are not listed. You may be required on occasion to work outside our normal working hours of 9:30am to 5:30pm.

Cyber Security & Engineering

• Constantly review and improve the firm's security posture and external security rating.
• Identify vulnerabilities in hardware and software to be remediated by Engineering\Operations teams.
• Understand current and emerging security threats.
• Assist and lead in Incident Response investigations and mitigation.
• Communicate threats and deliver training and awareness programmes to other team members.
• Produces quarterly privilege access slides, suggesting ongoing improvement for monthly operational security slides, measured using secure score.
• Evaluate, test and recommend security enhancements.
• Develop business continuity plans of critical business services in the event of a disaster.
• Lead CE+ accreditation.
• Identify security risks and exposures, determine the cause of security violations and suggest procedures to halt future incidents.
• Perform targeted regular and ad-hoc scans to identify potential breaches of the firm data and security and data protection policies.
• Identify, analyse, monitor and minimise areas of risk that pertain to Information technology.

Project Delivery

• Be able where relevant to participate in and lead varied IT Infrastructure lifecycle & security projects. Including HLD creation, solution costing and review.
• Ensure that proposed infrastructure architecture/design are aligned with Firms policies.
• Post project, participate in evaluating the success of the project, identifying best practices and lessons learned.

Third Level Support

• Provide Major Problem\Incident Support where Operations team need steering from a subject matter expert.
• Liaison with 3rd party suppliers on system issues.
• Ensuring that all members of 3rd level teams have the relevant skills sharing, procedures and documentation.
• This role requires the ability to communicate complex ideas clearly and effectively. Strong soft skills, including active listening, presentation, and communication skills, are therefore essential.

Candidate profile

Candidates for this position must have:

• 10+ years of experience as a full time IT professional, 5 years in a similar role.
• Demonstrable experience in a Cyber Security position with a focus on incident response, threat monitoring, and vulnerability management
• Hold at least one security related certifications such as CISSP, CEH, CCNA Security
• Experience with threat prevention techniques and tools
• Knowledge of best practices in modern security architectures and incident responses
• Experience of Infrastructure Business Continuity or Disaster Recovery planning.
• Experience designing, integrating and managing complex infrastructure solutions.
• Excellent problem-solving ability including leading multi-disciplinary teams to identify, research and coordinate resource to diagnose & troubleshoot complex issues.
• Excellent skills with Windows Server 2016/2019/2022 (Active Directory multi-site, DHCP, DNS, Intune, Group Policy, AGPM, PKI, ABDA, DFS, Entra, Azure SSO).
• Strong written and oral communication skills, and the ability to effectively communicate with technical and non-technical audiences at all levels.
• Be able to work with 3rd parties to manage on premise and cloud services.
• Strong planning skills.
• Experienced in Information Technology Infrastructure Library (ITIL) processes, procedures, and roles.

Our recruitment process

We anticipate this being a two-stage process:

1st interview - Infrastructure Engineering Manager & Infrastructure Architect

2nd interview - Head of Information Security & Head of Infrastructure & Operations

We are committed to ensuring that our recruitment processes are barrier-free and as inclusive as possible for everyone. This includes making adjustments for people who have a disability or long-term condition. If you have any questions or require any adjustments to be made to one or both of the application or interview processes, please contact the Recruitment Team.

We are a Disability Confident Committed employer and will offer an interview to applicants with a disability or long-term condition who best meet the minimum or essential criteria for our Business Services roles. If you would like to apply through the Disability Confident 'Offer An Interview' commitment, please apply via our online application form and not via LinkedIn. You are disabled under the Equality Act 2010 if you have a physical or mental impairment that has a 'substantial' and 'long-term' negative effect on your ability to do normal daily activities. For more information about the Disability Confident scheme, please see the government website here.

We welcome applications irrespective of race, colour, ethnic or national origin, disability, sex, gender identity, sexual orientation, age, religion, belief or marital status.

The purpose of this description is to provide guidance in relation to the general requirements of the position referred to. It is by no means an exhaustive list of the responsibilities that will be involved.

Any offer of employment with us is subject to the firm's receipt of a satisfactory report from its third-party screening and vetting provider in respect of the successful candidate. Your adviser will be able to explain how this process works in practice in the event of any questions.

At Slaughter and May, we take the protection of your personal information seriously and we are committed to safeguarding the privacy of the personal information that you share with us, or is collected by us, during the course of our interactions with you. Our Recruitment Privacy Notice ("RP Notice") supplements, and should be read alongside, the firm's Privacy Notice.

These privacy notices are always available to view within the Legal and Regulatory section of our website.

Who we are

Slaughter and May is a leading international law firm, recognised throughout the business community for its exceptional legal service, commercial awareness, and commitment to clients. We advise across the spectrum of legal matters including high-profile, ground-breaking, and complex transactions, contentious matters and all aspects of risk. We deliver innovative and bespoke solutions to our clients, domestically and internationally. We provide clear legal advice that spans the globe whilst tackling the cultural nuances between jurisdictions. Our lawyers understand how to coordinate and manage matters in the jurisdictions most relevant to our clients.

Excellence is central to everything we do, and it remains one of the first words mentioned when others are asked about the firm. We are very proud of that reputation. One reason we are known for excellence is because we have always been guided by a set of values that have been an implicit part of who we are and how we operate.

Our four core values are:

1. The highest standards;

2. Independence of thought;

3. Collective endeavour;

4. Respect for all.

They are not simply a list of characteristics. They are part of a framework, as they demonstrate our commitment to our four stakeholder groups (Our clients; Our people; The firm; Society).

At Slaughter and May, with over 1,400 partners and staff worldwide, everyone's contribution is valued, and we all enjoy an open, friendly and supportive environment. We have an underlying sense of pride in who we are and what we do, and our inclusive culture gives rise to a unique diversity of thinking, which is critical to our success and helps maintain our position as a true market leader.

Business Services Development

We offer a variety of learning and development opportunities to members of our Business Services team, including sessions open to everyone on topics ranging from personal impact and resilience to written communication. We also run a series of development programmes for supervisors and managers, as well as various bespoke team and one-to-one sessions.

Our Network of Networks

The firm has eleven employee networks run by employees and supported by partners. Collectively, we form a Network of Networks, and our aim is to foster a spirit of inclusion, both amongst the networks and the firm more widely. We work collaboratively to create a more open minded and inclusive work environment.

We strive to make people feel comfortable about bringing their authentic selves to work.

Each network offers an informal support mechanism for employees with shared backgrounds, perspectives or interests and hosts a number of exciting formal and informal events throughout the year, which are open to everyone. They're a great way to meet new people in the firm, as well as to celebrate difference and learn about a variety of experiences and perspective