> Markdown version of [/jobs/ext/2243878-head-of-information-security-and-privacy](https://www.wearedevelopers.com/jobs/ext/2243878-head-of-information-security-and-privacy). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Head of Information Security and Privacy

- **Company:** Morgan Law
- **Location:** London, UK
- **Experience:** Expert
- **Salary:** £100,000.0 - £110,000.0
- **Contract:** Contract
- **Skills:** Cyber Security, Information Security Management
- **Published:** August 26, 2026
- **Apply:** https://www.morgan-law.com/job/head-of-information-security-and-privacy-20462/#apply

## About the Role

* Information Security Manager or equivalent with relevant industry experience.
 * Experience of managing and overseeing ISO 27001 audits, Cyber Essentials and Cyber Essentials Plus.
 * Develop and lead information and cyber security strategies, roadmaps and maturity plans.
 * Provide technical security guidance and assurance to technical and non-technical stakeholders.
 * Design and deliver security awareness programmes that improve understanding and influence behaviour.
 * Support business continuity and resilience planning, testing and lessons learned.
 * Engage senior stakeholders and committees through clear reporting, influence and constructive challenge.

## Description

You will be responsible for the implementation and management of the Information management system, including third-party risk, ensuring its effectiveness is regularly assessed through external and internal audits., * Responsible for the development and management of information and cyber security frameworks and overseeing the management of the Information and Records Management.

 * Develop and promote policies to ensure compliance with regulations, standards and good practice relating to information security management.
 * Responsible for research and awareness of emerging security risks, ensuring solutions, services, policies, procedures and information security education programme are updated in reasonable timeframes to mitigate against new risks.
 * Responsible for making sure that the organisation is compliant with Information Security Standards (e.g. ISO 27001), ensuring all governance and audit requirements are undertaken.
 * Ensure that the organisation is appropriately protected in line with business needs against information and cyber risks including third-party and suppliers.


## Related Videos

- [Don't Be A Naive Developer: How To Avoid Basic Cybersecurity Mistakes](https://www.wearedevelopers.com/videos/498-don-t-be-a-naive-developer-how-to-avoid-basic-cybersecurity-mistakes)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)