IT Security and Compliance Analyst

About us

Meridian Lawyers is a dynamic and innovative law firm with offices in Sydney, Melbourne, Newcastle, Brisbane, Perth and Canberra. Clients look to our experienced and award-winning team for advice in Insurance, Corporate & Commercial, Workplace Relations & Safety, Commercial Litigation & Dispute Resolution, Property and Health Law.

We are known for providing exceptional quality legal advice that is both strategic and practical. It is this blend of technical expertise and the personal relationships we have with our clients that sets us apart from our competitors.

About the Opportunity

Meridian Lawyers is seeking a professional and proactive IT Security and Compliance Analyst to join our Sydney office on a full-time basis. This is a fantastic opportunity for someone who thrives in a fast-paced, client-focused environment and has a passion for cyber security and compliance / reporting with a focus on continuous improvement and development.

Key Responsibilities

As an IT Security and Compliance Analyst, this role will work within a close-knit team to provide professional IT Security and Compliance services to Meridian Lawyers across our six offices. This is a pivotal support role with varied workload, managing competing priorities and competing deadlines.

Your duties will include:

• Governance
  • Build and continue to develop our Information Security Services
  • Assistance in the development and maintenance of Cyber related policies and procedures
• Operations
  • Monitoring and responding to cyber incidents and alerts for change in service status report (availability, confidentiality and integrity)
  • Oversee business continuity planning (BCP) and disaster recovery (DR) plans and testing
  • Assist with the management of risks and security incidents
  • Track security trends and developments, benchmark the firm's security practices against industry standards
• Compliance
  • Conduct functionality and gap analyses to determine compliance with statutory and regulatory requirements
  • Establish processes to review the implementation of new technologies to ensure security compliance
  • Assist in providing training and mentoring to the broader organisation
• Risk Management
  • Periodically assist with the assessment of information security risk for the overall business
  • Review security issues brought out during security testing and provide necessary actions
  • Review security-related audit issues and provide guidance as required
• Reporting and Compliance Management
  • Prepare management reports on information security KPIs/KRIs and progress on security initiatives
  • Completion of cyber and other security related third party assessments
  • Assistance in the delivery of Cyber Security related audit activities
• Support
  • Providing frontline cyber security direction and input to applications, hardware and services provided to the organisation
  • Providing cyber security related input into technology processes such as patching, managing user accounts and access rights management
  • Assisting with security configuration of applications
  • Assisting with non-technical issues where required by the organisation

About you

You will have a Bachelor's degree in a cyber security, information security related degree and bring at least 3 - 4 years of prior experience in a cyber security role, preferably in the legal or professional services industry.

You will have:

• Experience in the operations of a law firm (highly desirable)
• High level of experience in supporting and using Microsoft Office products such as Outlook, Word, Excel and Teams
• Knowledge of Security frameworks and standards (ISO27001, NIST CSF etc)
• Experience with Secure Azure AD deployment and management
• Experience with MFA or similar
• Experience with Microsoft Intune or similar
• Experience in developing training manuals and programs
• Experience in implementing and managing online training solutions
• Ability to build and maintain strong working relationships
• Ability to identify and prioritise workloads
• Ability to review technical information and articulate in clear, concise language

You are known for your:

• Ability to work in a team and build relationships with peers and team members
• Can-do attitude and willingness to help others
• Delivering excellent client service
• Ability to contribute ideas, opinions and suggestions in team discussions
• Enthusiasm and responsiveness to internal clients
• Professional and courteous attitude to clients and internal stakeholders
• Motivation to improve ways of working

Why join us?

Joining Meridian Lawyers means joining a practice known for our specialisation and capability. We are a value driven organisation with a genuine, friendly and collaborative culture that respects, rewards and values input and innovation from all levels of the business.

We strive to be an employer of choice and understand that it is the contribution of our people that makes our business successful. We have a range of benefits that reward excellence, which include:

• Wellbeing initiatives including regular health and skin checks, flu vaccinations
• A range of discounts and services through a variety of leading retail and service partners
• An additional paid Personal Enjoyment Day each calendar year
• Ability to purchase up to 1 week of additional annual leave per financial year
• An employee referral program
• A commitment to learning and development through our MeridianMinds program