Information Security Analyst

Insight Global • Philadelphia, PA • 3h ago

Job Description

Insight Global is seeking an IS Analyst to join the IT department of an AM 200 law firm. The Information Security Analyst plays a key role in protecting the firm's digital assets, client data, and case-related information by implementing and maintaining security controls in alignment with the ISO 27001 Information Security Management System (ISMS). The analyst will proactively monitor, detect, and respond to security threats; ensure compliance with legal industry data protection standards; and support ongoing risk and compliance initiatives. This role is essential for maintaining client trust, ensuring the confidentiality of privileged information, and meeting both ethical and regulatory obligations in the legal sector.

Essential Functions & Responsibilities:

-Security Monitoring & Incident Response

Monitor networks, systems, and endpoints for potential threats using SIEM, EDR, and IDS/IPS tools.

-Analyze security alerts, investigate incidents, and coordinate timely response and remediation.

Conduct root cause analyses and prepare post-incident reports.

-Maintain and test the Incident Response Plan as part of ISO 27001 continuous improvement.

Participate in legal hold or eDiscovery-related security reviews when required.

-Risk Management & ISO 27001 Alignment

Support the firm's Information Security Management System (ISMS) and contribute to maintaining ISO 27001 certification.

-Conduct periodic risk assessments, identifying potential threats to confidentiality, integrity, and availability of legal data.

-Document and monitor risk treatment plans and corrective actions.

-Participate in internal and external ISO audits by providing evidence and maintaining control documentation.

-Contribute to the ongoing maintenance of the Firm's risk register.

-Seek out opportunities for continuous improvement in processes and procedures.

-Vulnerability Management & Threat Intelligence

-Perform regular vulnerability scans and coordinate remediation with IT and service providers.

-Monitor industry-standard threat intelligence sources, cybersecurity forums, and dark web feeds for emerging risks, vulnerabilities, and threat actor activities targeting the legal sector.

-Track and report vulnerabilities relevant to law firms, third-party vendors, and legal technology platforms (e.g., document management systems, case management tools).

-Track and report on patch-management activity to be sure it aligns with required standards.

Stay informed on evolving attack vectors such as business email compromise, ransomware, and data exfiltration threats impacting professional services firms.

-Governance, Policy, and Compliance

Develop, maintain, and enforce security policies, procedures, and standards in accordance with ISO 27001 Annex A controls and policy lifecycle.

-Ensure adherence to data privacy laws (e.g., GDPR, CCPA) and client contractual obligations.

Collaborate with legal teams to align information security practices with attorney-client privilege requirements and ethical obligations.

-Support third-party vendor risk assessments and due diligence processes.

-Security Awareness & Continuous Improvement

-Support the firm's security awareness training program and conduct periodic phishing simulations.

-Educate staff on secure handling of confidential documents and client communications.

-Contribute to the continuous improvement cycle of the ISMS by identifying opportunities for control enhancement.

-Keep up to date with the latest developments in cybersecurity, privacy law, and ISO frameworks.

-Access Control & Data Protection

Manage and review access controls, ensuring least privilege and role-based access models are enforced.

-Monitor privileged accounts and perform periodic user access reviews.

-Work with IT to secure document repositories, collaboration tools, and cloud-based applications.

-Review and act as needed to on data loss prevention alerts from various tools.

Technical Skills:

Experience with ISO 27001, NIST CSF, or CIS Controls.

Proficiency with SIEM platforms (e.g., Splunk, Sentinel, LogRhythm).

Strong understanding of network protocols, IDS/IPS, and endpoint security.

Familiarity with vulnerability management tools (e.g., Qualys, Nessus) and ticketing workflows.

Knowledge of encryption, DLP, and secure file transfer solutions used in legal environments.

Understanding of cloud security concepts (Microsoft 365, Azure, or AWS).

Familiarity with scripting/automation tools and techniques.

Knowledge of EDR/XDR solutions and providers.

This is a full-time hybrid role, sitting 2 days in office each week in any of the firm's following offices: Baltimore, Boston, Chicago, Ft. Lauderdale, Harrisburg, Miami, Minneapolis, Newark, New York City, Philadelphia, Princeton, Wayne, PA, West Palm Beach, Wilmington, DE or Washington, D.C.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

-Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field. Equivalent experience considered.

CompTIA SecurityCertified Cisco Network Associate (CCNA)

Systems Security Certified Practitioner (SSCP)

Certified Information Systems Security Professional (CISSP)

Similar Jobs

Software Engineer III

Quest Diagnostics • Norristown, PA • 1h ago

IT & Engineering

Job Description Quest Diagnostics Incorporated seeks Software Engineer III (multiple positions) in Norristown, PA. Responsibilities: Develop key product features within existing large-scale enterprise applications and ne...

1h ago

Go to Apply

Principal Software Engineer

Highmark Health • Trenton, NJ • 1h ago

IT & Engineering

Company : Highmark Health Job Description : JOB SUMMARY The job is an integral member of an agile software engineer team responsible for building scalable software applications across all digital channels to serve our cu...

1h ago

Go to Apply

Machining Manufacturing Engineer

Lockheed Martin • King Of Prussia, PA • 2h ago

IT & Engineering

Description: What You'll Do Join a high-performance manufacturing team where you'll turn complex engineering designs into precise, efficient CNC programs. In this role, you'll take ownership of programming, validation, a...

2h ago

Go to Apply

Entry Level Pest Control Technician - Norristown, PA

Viking Termite and Pest Control, Inc. • Norristown, PA • 6h ago

IT & Engineering

Norristown, PA, USA | Hourly | Full Time Competitive Compensation-Impressive Benefits-Potential for Growth- Work/Life Balance Are you looking for a fulfilling career, not just a job? Are you seeking an employer that prov...

6h ago

Go to Apply

Entry Level Pest Control Technician - West Berlin, NJ

Viking Termite and Pest Control, Inc. • West Berlin, NJ • 6h ago

IT & Engineering

West Berlin, NJ, USA | Hourly | Full Time Competitive Compensation-Impressive Benefits-Potential for Growth- Work/Life Balance Are you looking for a fulfilling career, not just a job? Are you seeking an employer that pro...

6h ago

Go to Apply

Entry Level Pest Control Technician - Newton Square, PA

Viking Termite and Pest Control, Inc. • Newtown Square, PA • 6h ago

IT & Engineering

Newtown Square, PA, USA | Hourly | Full Time Competitive Compensation-Impressive Benefits-Potential for Growth- Work/Life Balance Are you looking for a fulfilling career, not just a job? Are you seeking an employer that...

6h ago

Go to Apply

Entry Level Pest Control Technician - Fort Washington, PA

Viking Termite and Pest Control, Inc. • Fort Washington, PA • 6h ago

IT & Engineering

Fort Washington, PA, USA | Hourly | Full Time Competitive Compensation-Impressive Benefits-Potential for Growth- Work/Life Balance Are you looking for a fulfilling career, not just a job? Are you seeking an employer that...

6h ago

Go to Apply

Controls Engineer, III

SP Industries Inc. • Warminster, PA • 8h ago

IT & Engineering

ATS Company: SP Industries Requisition ID: 16502 Location: Warminster, PA, US, 18974 Date: Feb 25, 2026 Controls Engineer, III SP Industries Inc., an ATS company is seeking a Controls Engineer to join the Engineering tea...

8h ago

Go to Apply

Junior IT Business Analyst

SP Industries Inc. • Warminster, PA • 8h ago

IT & Engineering

ATS Company: SP Industries Requisition ID: 16490 Location: Warminster, PA, US, 18974 Date: Mar 25, 2026 Junior IT Business Analyst SP Industries Inc., an ATS Company is searching for a Junior IT Business Analyst to join...

8h ago

Go to Apply

Supervisory Mobility Transportation Specialist

Veterans Affairs, Veterans Health Administration • Philadelphia, PA • 8h ago

IT & Engineering

Summary This position is located in the Veterans Transportation Service (VTS) at the Corporal Michael J. Crescenz Department of Veterans Affairs Medical Center in Philadelphia, PA. Responsibilities THIS IS NOT A VIRTUAL...

8h ago

Go to Apply

Subscribe to get new jobs sent directly to you
(no charge, cancel anytime)

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.