Senior Information & Cyber Security Manager

I am looking to recruit a Senior Cyber and Information Security Manager to join a national law firm. The business has a strong reputation, and you’ll be joining a pre-existing team and set up. The company offers good benefits and hybrid working, ideally out of either their Bristol or Southampton office twice a week.

The role responsibilities:

• Define and deliver the cyber and information security strategy and roadmap.
• Act as a trusted advisor to senior leaders on cyber risk, governance and compliance.
• Own and continually enhance the Information Security Management System (ISMS).
• Lead the approach to ISO 27001, NIST CSF, Cyber Essentials Plus and wider security best practice.
• Oversee security operations, incident response and threat management activities.
• Manage key security suppliers, partners and managed service providers.
• Support client audits, due diligence requests and regulatory requirements.
• Drive security awareness and embed a security-first culture across the firm.
• Lead and develop a small team of Cyber and Information Security professionals.
• Work collaboratively with Technology, Risk, Compliance and business teams to strengthen our security posture.

• Significant experience in a senior cyber or information security role.
• Experience within a regulated or professional services environment.
• Strong knowledge of ISO 27001, NIST CSF, Cyber Essentials Plus and security governance frameworks.
• Hands-on experience across risk management, incident response and security operations.
• Proven ability to engage, influence and build credibility with senior stakeholders.
• Experience leading, mentoring or developing security professionals.
• A strong understanding of GDPR and data protection principles.
• A proactive, pragmatic and solutions-focused approach.
• Either CISM or CISSP, * Application Security
• Auditing Skills
• Automation & Control Systems
• Brand Management
• Communication Skills
• Data Security
• Information Security Management
• ISO Standards
• Operating System Security
• Risk Analysis

• Salary of between £80k-£90k
• Hybrid and flexible working
• Performance-linked bonus.
• Enhanced parental leave policies.
• Private healthcare and wellbeing initiatives.