Head of Cyber Security & Information Security

The successful candidate will take ownership of the firm's cyber security posture, while also ensuring robust information governance, regulatory compliance and data protection standards are maintained across the business.

The Role

As Head of Cyber Security & Information Security, you will:

• Lead the firm's cyber security and information security strategy

• Oversee proactive and reactive threat defence measures

• Ensure alignment with legal regulatory and compliance frameworks

• Work closely with senior leadership on risk management and governance

• Oversee security policies, controls, audits and reporting

• Manage and develop the in-house security function (currently 4 team members, including a Cyber Security Architect)

• Act as the firm's senior escalation point for security incidents

This is a senior leadership role requiring an individual with proven experience operating at Cyber Security Manager, Information Security Manager or Head of Information Security level within a law firm or professional services environment., Whilst architecture expertise is not essential (given the existing Cyber Security Architect), strong experience in security strategy, governance and risk management is critical.

Required Experience & Background

We are particularly interested in individuals who have:

• Operated as a Cyber Security Manager, Information Security Manager or Head of Security within a law firm

• Strong exposure to legal compliance, regulatory frameworks and information governance

• Experience working with data protection and confidentiality requirements in a legal environment

• A strong understanding of risk, audit and security governance processes

• Experience reporting to board or senior partner level

Experience within the legal sector is highly desirable due to the regulatory and client confidentiality landscape.

Technical Environment

Strong knowledge of the following technologies is required:

Microsoft Defender & Sentinel

MS E5 Security Suite

Tessian / Proofpoint

Mimecast

Azure Active Directory & on-prem Active Directory

Microsoft Endpoint Manager & Group Policy

VMware virtual server infrastructure

Citrix XenApp / XenDesktop / WEM

Windows Server & Desktop environments (with exposure to Mac/Linux beneficial)

iOS and Android device management

Networking fundamentals and LAN troubleshooting

IT Service Management systems

Personal Profile

Strategic thinker with strong commercial awareness

Ability to balance cyber resilience with regulatory compliance

Confident stakeholder communicator at senior level

Analytical and methodical problem solver

Strong leadership capability