> Markdown version of [/jobs/ext/2838524-head-of-information-security](https://www.wearedevelopers.com/jobs/ext/2838524-head-of-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Head of Information Security - **Company:** Yesterday By Picture More - **Location:** London, UK - **Experience:** Expert - **Salary:** £100,000.0 - £110,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Software System Penetration Testing, Microsoft Azure, Business Software, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Disaster Recovery, Information Technology Operations, Intrusion Detection and Prevention, Software Vulnerability Management, Privacy Controls, Data Management - **Published:** September 11, 2026 - **Apply:** https://www.reed.co.uk/jobs/head-of-information-security/57333239 ## About the Role Are you an experienced Information Security leader who can combine cyber strategy with hands-on operational leadership in a highly regulated professional services environment?, * Strong Information Security leadership experience, ideally within legal, professional services or another regulated environment * CISSP or CISM certification * Proven ownership of ISO 27001 certification and continuous improvement * Strong experience managing outsourced SOC and specialist security providers * Excellent understanding of incident response, threat detection, vulnerability management and remediation * Strong Microsoft/Azure, cloud, infrastructure and SaaS security knowledge * Experience providing security assurance across technology projects and architecture * Understanding of UK GDPR, data protection and regulatory security requirements * Experience advising senior stakeholders on cyber risk * Understanding of security risks associated with AI and data platforms * Strong people leadership and stakeholder management skills * Ability to operate strategically while remaining close enough to security operations to provide practical leadership If you're looking for a senior security role where you can genuinely shape cyber strategy, maturity and culture, apply today to find out more., * Cyber Essentials Certification * ISO 27001 Information Security ## Description We are recruiting a Head of Information Security for a leading London law firm. Reporting directly to the CIO, you will take ownership of the firm's cyber security strategy, security operations, cyber risk and assurance, while leading the continued development of its security capability. This is a broad leadership position covering everything from the outsourced SOC and incident response through to ISO 27001, Cyber Essentials Plus, cloud security, supplier assurance and the secure adoption of AI. What's on offer: * Hybrid working, 3 days per week in the London office * Direct reporting line to the CIO * Senior ownership of the firm's cyber security strategy and roadmap * Opportunity to influence security across technology, cloud, data and AI * Leadership of internal security capability and external security partners * High visibility across senior leadership and the wider business What you'll be responsible for: * Develop and deliver the firm's cyber security strategy and maturity roadmap * Own and continuously improve security operations and the outsourced SOC * Lead cyber incident investigation and response * Oversee vulnerability management, penetration testing and remediation programmes * Maintain ownership of ISO 27001 and Cyber Essentials Plus * Establish security architecture principles across infrastructure, cloud, SaaS, data and business applications * Embed security and privacy by design into technology projects * Own third-party and supplier security assurance * Produce clear cyber risk and control reporting for senior leadership * Support business continuity, disaster recovery and operational resilience * Work closely with IT Operations, Data, Innovation, Legal and the DPO * Advise on security and governance risks surrounding AI and emerging technologies * Support client security audits, tenders and due diligence exercises ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)