Information Security in Project Management and Legal aspects

   2) What are the legal aspects I should be looking for a mid sized IT services company.

Answer:

1) As you know, it is related with the control A.6.1.5, and to implement it you can do this in your organization: a) Include information security objectives in project objectives, b) Perform an information security risk assessment at an early stage of the project to identify necessary controls and c) information security is part of all phases of the applied project methodology. 
 
2) Depends of you country, but common laws (at least in Europe) are related with the protection of personal data, intellectual property and electronic signature. To know more information about the laws regulation in each country, please see this “List of legal, regulatory, contractual and other requirements" : https://www.infosecpedia.info/laws-regulatio*******************************************