> Markdown version of [/jobs/ext/3282090-senior-cyber-and-information-security-manager](https://www.wearedevelopers.com/jobs/ext/3282090-senior-cyber-and-information-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cyber and Information Security Manager - **Company:** Foot Anstey LLP - **Location:** Exeter, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Security Management System - **Published:** September 21, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=8dbe2bb8dc39dd95 ## About the Role We're looking for an experienced cyber and information security professional who combines technical expertise with strong stakeholder management and leadership skills. You'll bring: * Significant experience in a senior cyber or information security role. * Experience within a regulated or professional services environment. * Strong knowledge of ISO 27001, NIST CSF, Cyber Essentials Plus and security governance frameworks. * Hands-on experience across risk management, incident response and security operations. * Proven ability to engage, influence and build credibility with senior stakeholders. * Experience leading, mentoring or developing security professionals. * A strong understanding of GDPR and data protection principles. * A proactive, pragmatic and solutions-focused approach., * CISM certification (required). * CISSP and/or ISO 27001 Lead Implementer/Auditor certification desirable. * Commitment to ongoing professional development. Desirable experience * Leading ISO 27001 implementation and certification programmes. * Legal sector experience. * Managing external audits, client assurance activities and third-party security assessments. ## Description As our Senior Cyber and Information Security Manager, you'll lead the continued development of our cyber and information security function within our growing national law firm. In this role, you'll: * Define and deliver our cyber and information security strategy and roadmap. * Act as a trusted advisor to senior leaders on cyber risk, governance and compliance. * Own and continually enhance our Information Security Management System (ISMS). * Lead our approach to ISO 27001, NIST CSF, Cyber Essentials Plus and wider security best practice. * Oversee security operations, incident response and threat management activities. * Manage key security suppliers, partners and managed service providers. * Support client audits, due diligence requests and regulatory requirements. * Drive security awareness and embed a security-first culture across the firm. * Lead and develop a small team of Cyber and Information Security professionals. * Work collaboratively with Technology, Risk, Compliance and business teams to strengthen our security posture. This is a highly visible role offering the opportunity to influence strategy, shape security culture and play a key role in our ongoing growth journey. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Communicate efficiently with Software Architecture Diagrams](https://www.wearedevelopers.com/videos/379-communicate-efficiently-with-software-architecture-diagrams) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)