Senior AI & Information Security Analyst

The Opportunity

Our global offshore law firm client is investing in a range of AI, innovation and technology initiatives designed to support both legal service delivery and business operations.

As part of this programme, they are seeking a Senior AI & Information Security Analyst to provide information security, governance and risk expertise across AI and technology projects.

The successful candidate will act as the dedicated Information Security lead aligned to the AI & Innovation Programme, helping the business assess, implement and govern emerging technologies in a secure and controlled manner. The role will work closely with project teams, business stakeholders and technology functions to ensure security requirements are appropriately considered throughout the project lifecycle.

While the initial focus will be on AI and innovation initiatives, the role will also support wider information security projects and programmes across the business.

Key Responsibilities

AI & Innovation

• Act as the Information Security SME across AI and innovation initiatives.
• Provide information security guidance throughout the assessment, selection and implementation of AI-enabled technologies.
• Support the secure adoption of technologies including Microsoft Copilot and other AI platforms.
• Assess information security, privacy and governance risks associated with AI solutions and emerging technologies.
• Identify, document and manage risks associated with proposed technologies and solutions.
• Support the development and implementation of appropriate governance controls for AI-related initiatives.
• Maintain awareness of developments in AI security, governance and related standards.

Information Security Governance & Risk

• Conduct information security and technology risk assessments.
• Support security assurance activities across projects and programmes.
• Review proposed solutions and provide recommendations regarding security controls and risk mitigation.
• Support the development, maintenance and review of information security policies, standards and procedures.
• Assist with activities relating to ISO 27001 and alignment with emerging AI governance standards such as ISO 42001.
• Contribute to information governance, privacy and data protection activities where required.
• Support the management and communication of information security risks across projects.

Stakeholder Engagement

• Partner with business, technology and innovation teams to embed security considerations into projects.
• Provide clear and practical security guidance to both technical and non-technical stakeholders.
• Work with third-party suppliers and technology vendors during assessment and implementation activities.
• Engage with stakeholders across multiple offices and jurisdictions.
• Build strong working relationships to support the delivery of business and technology change initiatives.

Wider Information Security Activities

• Support additional information security projects and programmes across the business.
• Contribute to broader information security objectives and initiatives as programme priorities evolve.

Skills & Experience

Essential

• Experience within Information Security, Security Governance, Security Assurance, Technology Risk or a related discipline.
• Experience conducting security or technology risk assessments.
• Understanding of information security governance, risk management and security controls.
• Experience supporting technology, business change or project-based initiatives.
• Ability to interpret security risks and provide practical recommendations.
• Experience working with a range of technical and non-technical stakeholders.
• Strong analytical, organisational and problem-solving skills.
• Ability to work independently and manage multiple priorities.
• Pragmatic approach to balancing security requirements with business objectives.

Desirable

• Experience supporting AI, innovation or emerging technology initiatives.
• Understanding of AI governance, AI risk and responsible AI concepts.
• Knowledge of ISO 27001.
• Awareness of ISO 42001.
• Experience within legal, professional services, financial services or other information-sensitive environments.
• Exposure to common enterprise and SaaS-based technologies.
• Experience supporting privacy, information governance or data protection activities.

Certifications

The following certifications would be advantageous but are not mandatory:

• CISSP
• CISM
• Other relevant Information Security certifications

What Success Looks Like

The successful candidate will combine information security expertise with governance and risk management capabilities. They will be comfortable operating across business and technology teams, supporting the secure adoption of AI and other technologies while providing practical, risk-based security guidance.

This role is suited to someone who can bridge:

• Information Security
• Technology Risk
• Security Governance
• Security Assurance
• AI Governance
• Stakeholder Management
• Project and Change Delivery

and who is capable of supporting a fast-moving portfolio of AI, innovation and wider technology initiatives.

Morgan Hunt is a multi-award-winning recruitment business for interim, contract and temporary recruitment and acts as an Employment Agency in relation to permanent vacancies. Morgan Hunt is an equal opportunities employer. Job suitability is assessed on merit in accordance with the individual's skills, qualifications and abilities to perform the relevant duties required in a particular role.