Head of Information Security - Legal

Head of Information Security - Legal

We are seeking an experienced Head of Information Security to lead and develop the organisation's cyber security strategy, ensuring the confidentiality, integrity and availability of information, systems and services.

Reporting to the CIO, you will own the organisation's information security framework, including ISO 27001 and Cyber Essentials Plus, while leading the security roadmap and wider security operations.

You MUST have experience of working at a law firm.

Key Responsibilities

• Develop and deliver the cyber security strategy and roadmap.
• Own and continuously improve ISO 27001 and Cyber Essentials Plus.
• Lead security operations and manage an outsourced SOC.
• Oversee incident response, vulnerability management and remediation.
• Manage external security partners and specialist suppliers.
• Lead and mentor the Information Security team.
• Work closely with senior stakeholders across IT, Legal, Data and the wider business.

Key Requirements

• Strong information security leadership experience, ideally within legal, professional services or another regulated environment.
• Proven experience owning and improving ISO 27001 and security governance.
• Experience managing outsourced SOC and security partners.
• Strong knowledge of security operations, threat detection, incident response and vulnerability management.
• Good understanding of Microsoft/Azure, cloud security, SaaS assurance and security architecture.

This is a senior leadership opportunity to shape and mature the organisation's information security capability.