> Markdown version of [/jobs/ext/4594611-senior-information](https://www.wearedevelopers.com/jobs/ext/4594611-senior-information). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information - **Company:** Hays plc - **Location:** Southampton, UK - **Experience:** Expert - **Salary:** £80,000.0 - £90,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Security Management System, National Institute of Standards and Technology Cybersecurity Framework - **Published:** November 6, 2026 - **Apply:** https://www.hays.co.uk/job-detail/senior-information--bristol-or-southampton---hybrid_4843209 ## About the Role * Significant experience in a senior cyber or information security role. * Experience within a regulated or professional services environment. * Strong knowledge of ISO 27001, NIST CSF, Cyber Essentials Plus and security governance frameworks. * Hands-on experience across risk management, incident response and security operations. * Proven ability to engage, influence and build credibility with senior stakeholders. * Experience leading, mentoring or developing security professionals. * A strong understanding of GDPR and data protection principles. * A proactive, pragmatic and solutions-focused approach. * Either CISM or CISSP ## Description Senior Cyber and Information Security Manager Permanent - £80k - £90k Location: Hybrid - Either Bristol or Southampton Your new company: I am looking to recruit a Senior Cyber and Information Security Manager to join a national law firm. The business has a strong reputation, and you'll be joining a pre-existing team and set up. The company offers good benefits and hybrid working, ideally out of either their Bristol or Southampton office twice a week. The role responsibilities: * Define and deliver the cyber and information security strategy and roadmap. * Act as a trusted advisor to senior leaders on cyber risk, governance and compliance. * Own and continually enhance the Information Security Management System (ISMS). * Lead the approach to ISO 27001, NIST CSF, Cyber Essentials Plus and wider security best practice. * Oversee security operations, incident response and threat management activities. * Manage key security suppliers, partners and managed service providers. * Support client audits, due diligence requests and regulatory requirements. * Drive security awareness and embed a security-first culture across the firm. * Lead and develop a small team of Cyber and Information Security professionals. * Work collaboratively with Technology, Risk, Compliance and business teams to strengthen our security posture. You will need: * Significant experience in a senior cyber or information security role. * Experience within a regulated or professional services environment. * Strong knowledge of ISO 27001, NIST CSF, Cyber Essentials Plus and security governance frameworks. * Hands-on experience across risk management, incident response and security operations. * Proven ability to engage, influence and build credibility with senior stakeholders. * Experience leading, mentoring or developing security professionals. * A strong understanding of GDPR and data protection principles. * A proactive, pragmatic and solutions-focused approach. * Either CISM or CISSP What you'll get in return: * Salary of between £80k-£90k * Hybrid and flexible working * Performance-linked bonus. * Enhanced parental leave policies. * Private healthcare and wellbeing initiatives. #4843209 - Daryl