Senior Analyst, Cyber Incident Response

We need to output HTML fragment with sections: h3 for headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must only include sections that have real specific content. The posting includes description paragraphs, responsibilities list, qualifications, benefits. No explicit Pay or Schedule content. So we should not include Pay or Schedule sections. Also we should not repeat job title as heading. We need to include maybe "About the role" from the initial description. Then "Responsibilities". Then "Qualifications" (or maybe "Requirements"? The posting has "Qualifications:" heading. We'll use that. Also "Benefits". Possibly "Skills" could be derived from qualifications but we have qualifications covering skills; but we could still include a Skills section if there is explicit skill list. The qualifications includes skills like Excel, scripting, etc. Could put under Skills. But we need to avoid thin sections. Perhaps combine qualifications and skills? The instruction: Prefer a few substantive sections over many thin ones. So we could have About the role, Responsibilities, Qualifications, Benefits. That's four sections. We must use

for section headings. Use

• for any list of duties/requirements/benefits, and

  for prose. We need to preserve all substantive information, not invent or summarize away detail. Remove boilerplate etc. We need to include the description paragraphs as prose under About the role. Let's extract the substantive content: First paragraph: "At Norton Rose Fulbright, people thrive because of a shared commitment to quality, unity and integrity. The highly regarded law firm consistently receives recognition from Great Place to Work and Top Workplaces, two companies that specialize in assessing organizational culture. Teams collaborate across regions, value new ideas and deliver meaningful client solutions, supported by a culture that embraces ambition, development and shared success. With more than 3,000 lawyers and 3,000 business services professionals working together across 50 offices worldwide, this global law firm provides a full range of legal services to leading corporations and financial institutions operating in key markets and sectors. As an early adopter of advanced eDiscovery technology and methodologies, the Firm's Global eDiscovery Services Department provides strategic services to our disputes lawyers and clients. Working alongside other talented professionals, you'll be surrounded by an open and collaborative culture that embraces recognition and professional development." Second paragraph: "The Sr. Project Analyst, eDiscovery Cyber Services supports the day-to-day delivery of cyber incident response, data breach and sensitive data matters. Working closely with Project Managers and senior team members, this role coordinates assigned project workstreams, tracks timelines and deliverables, communicates with case teams and vendors, and applies technical skills in data management, scripting, review platforms and validation to keep projects on schedule, within scope and defensible." That's about the role. Responsibilities: list after "Responsibilities include, but are not limited to:" then bullet points. We need to capture each bullet as

• . Let's list them: - Coordinate assigned workstreams on cyber incident response, data breach and sensitive data matters, tracking tasks, deadlines, dependencies and deliverables against the project plan. - Serve as a day-to-day point of contact for case teams, clients and vendors on assigned workstreams, confirming instructions, relaying requests and following up on open items. - Maintain project trackers, matter documentation, workflow notes and handoff materials reflecting status, assumptions, decisions, exceptions and next steps. - Prepare status updates, metrics, validation summaries, draft reports and other project communications for Project Managers, legal teams and clients. - Help Project Managers monitor scope, data volumes, hours and vendor activity, and flag potential schedule or budget impacts early. - Follow established procedures for data intake, transfer, tracking, preservation, chain of custody documentation and secure handling of sensitive information. - Analyze, manage and reconcile project data, including file listings, processing reports, review outputs, exception logs and datasets used for notification, using Excel, Power Query, SQL, Python, PowerShell or similar tools. - Use search, analytics, regular expressions and data mining techniques to identify and report on PII, PHI, PCI and other sensitive or regulated data. - Support workflows within the review platform, including workspace setup, searches, batching or sampling, coding fields, exports, metrics and quality control, and validate outputs for accuracy, completeness and defensibility. - Identify issues involving projects, workflows, data or evidence handling; escalate risks or unresolved questions; and help coordinate resolution. Then after responsibilities there is "Professional Development" paragraph: "Continue building expertise in project management, cyber eDiscovery, scripting, data management, review platforms, validation and evidence handling, with increasing ownership of workstreams over time. Contribute reusable scripts, templates, trackers, validation checklists and process improvements that support consistent, defensible project delivery." That could be part of responsibilities or qualifications? It's more like expectations. Could be included under Responsibilities as additional bullet? But it's prose. We could include as a

  under Responsibilities after list, or maybe under About the role? Probably better to include as a

  under Responsibilities (since it's about role expectations). However the instruction: Use

  • for any list of duties/requirements/benefits, and

    for prose. So we can have a

    after the list. Then "Other duties Please note this job description does not cover or contain all activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. This position is remote and can therefore be located in any city where we have a US office. Flexibility to visit the office for training or meetings is required." That's also prose; could be under About the role or Responsibilities? It's about other duties. Could be a separate section "Other duties" but we should avoid thin sections. Could incorporate into About the role or Responsibilities as a

    . Probably better to put under About the role as additional description. Then "Qualifications:" heading followed by list: - Bachelor's degree required. - Minimum of two years of experience in eDiscovery, litigation support, legal technology, cyber incident response, data analytics or a related field, including experience supporting or coordinating project workstreams. - Experience analyzing structured and unstructured data, including spreadsheets, file listings, processing reports, review outputs and exception logs. - Strong Excel skills required; exposure to Power Query, SQL, Python, PowerShell or similar scripting/automation tools preferred. - Working knowledge of eDiscovery workflows, evidence handling, chain of custody documentation, validation and quality control procedures. - Working knowledge of sensitive data elements and privacy classifications, including PII, PHI and PCI. - Experience with Relativity or another review platform, including searches, batching or sampling, coding fields, exports, reporting and quality control workflows. - Strong analytical, troubleshooting, organizational and communication skills, with close attention to defensibility and data quality. - Ability to manage assigned project tasks and smaller workstreams, track deadlines and deliverables, recognize risks and escalate appropriately. - Familiarity with project management practices such as work plans, trackers, status reporting and budget monitoring. That's a list; we can put under

    Qualifications

    with
    • . Then Benefits section: we have a paragraph describing benefits. We'll put under

      Benefits

      with

      for prose (maybe also list? but it's prose). The benefits paragraph includes multiple sentences; we can keep as

      . We must not include Pay or Schedule sections because no specific content. We must remove boilerplate: Legal Notices, EEO, etc. Also remove "Other duties" heading? We'll incorporate its content into About the role or Responsibilities as prose. We must not repeat job title as heading. We must not include Job ID/requisition numbers. We must preserve all substantive information. Now craft HTML:

      About the role

      At Norton Rose Fulbright, people thrive because of a shared commitment to quality, unity and integrity. The highly regarded law firm consistently receives recognition from Great Place to Work and Top Workplaces, two companies that specialize in assessing organizational culture. Teams collaborate across regions, value new ideas and deliver meaningful client solutions, supported by a culture that embraces ambition, development and shared success. With more than 3,000 lawyers and 3,000 business services professionals working together across 50 offices worldwide, this global law firm provides a full range of legal services to leading corporations and financial institutions operating in key markets and sectors. As an early adopter of advanced eDiscovery technology and methodologies, the Firm's Global eDiscovery Services Department provides strategic services to our disputes lawyers and clients. Working alongside other talented professionals, you'll be surrounded by an open and collaborative culture that embraces recognition and professional development. The Sr. Project Analyst, eDiscovery Cyber Services supports the day-to-day delivery of cyber incident response, data breach and sensitive data matters. Working closely with Project Managers and senior team members, this role coordinates assigned project workstreams, tracks timelines and deliverables, communicates with case teams and vendors, and applies technical skills in data management, scripting, review platforms and validation to keep projects on schedule, within scope and defensible. This position is remote and can therefore be located in any city where we have a US office. Flexibility to visit the office for training or meetings is required. Please note this job description does not cover or contain all activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

      Then Responsibilities:

      Responsibilities

      • Coordinate assigned workstreams on cyber incident response, data breach and sensitive data matters, tracking tasks, deadlines, dependencies and deliverables against the project plan.
      • Serve as a day-to-day point of contact for case teams, clients and vendors on assigned workstreams, confirming instructions, relaying requests and following up on open items.
      • Maintain project trackers, matter documentation, workflow notes and handoff materials reflecting status, assumptions, decisions, exceptions and next steps.
      • Prepare status updates, metrics, validation summaries, draft reports and other project communications for Project Managers, legal teams and clients.
      • Help Project Managers monitor scope, data volumes, hours and vendor activity, and flag potential schedule or budget impacts early.
      • Follow established procedures for data intake, transfer, tracking, preservation, chain of custody documentation and secure handling of sensitive information.
      • Analyze, manage and reconcile project data, including file listings, processing reports, review outputs, exception logs and datasets used for notification, using Excel, Power Query, SQL, Python, PowerShell or similar tools.
      • Use search, analytics, regular expressions and data mining techniques to identify and report on PII, PHI, PCI and other sensitive or regulated data.
      • Support workflows within the review platform, including workspace setup, searches, batching or sampling, coding fields, exports, metrics and quality control, and validate outputs for accuracy, completeness and defensibility.
      • Identify issues involving projects, workflows, data or evidence handling; escalate risks or unresolved questions; and help coordinate resolution.

      Continue building expertise in project management, cyber eDiscovery, scripting, data management, review platforms, validation and evidence handling, with increasing ownership of workstreams over time. Contribute reusable scripts, templates, trackers, validation checklists and process improvements that support consistent, defensible project delivery.

      Then Qualifications:

      Qualifications

      • Bachelor's degree required.
      • Minimum of two years of experience in eDiscovery, litigation support, legal technology, cyber incident response, data analytics or a related field, including experience supporting or coordinating project workstreams.
      • Experience analyzing structured and unstructured data, including spreadsheets, file listings, processing reports, review outputs and exception logs.
      • Strong Excel skills required; exposure to Power Query, SQL, Python, PowerShell or