> Markdown version of [/jobs/ext/4630894-head-of-information-security-and-privacy](https://www.wearedevelopers.com/jobs/ext/4630894-head-of-information-security-and-privacy). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Head of Information Security and Privacy

- **Company:** Morgan Law
- **Location:** Bristol, UK (Remote available)
- **Experience:** Expert
- **Salary:** £100,000 - £110,000
- **Contract:** Temporary contract
- **Skills:** Cyber Security, Information Security Management
- **Published:** November 8, 2026
- **Apply:** https://www.hiredonline.co.uk/jobs/225770687-head-of-information-security-and-privacy/morgan-law

## About the Role

* Information Security Manager or equivalent with relevant industry experience.
 * Experience of managing and overseeing ISO 27001 audits, Cyber Essentials and Cyber Essentials Plus.
 * Develop and lead information and cyber security strategies, roadmaps and maturity plans.
 * Provide technical security guidance and assurance to technical and non-technical stakeholders.
 * Design and deliver security awareness programmes that improve understanding and influence behaviour.
 * Support business continuity and resilience planning, testing and lessons learned.
 * Engage senior stakeholders and committees through clear reporting, influence and constructive challenge.

## Description

You will be responsible for the implementation and management of the Information management system, including third-party risk, ensuring its effectiveness is regularly assessed through external and internal audits., * Responsible for the development and management of information and cyber security frameworks and overseeing the management of the Information and Records Management.

 * Develop and promote policies to ensure compliance with regulations, standards and good practice relating to information security management.
 * Responsible for research and awareness of emerging security risks, ensuring solutions, services, policies, procedures and information security education programme are updated in reasonable timeframes to mitigate against new risks.
 * Responsible for making sure that the organisation is compliant with Information Security Standards (e.g. ISO 27001), ensuring all governance and audit requirements are undertaken.
 * Ensure that the organisation is appropriately protected in line with business needs against information and cyber risks including third-party and suppliers.