Head of Cyber Security & Information Security
Manchester
£80,000 – £120,000
Our client, a well-established and growing regional law firm, is now seeking to appoint a Head of Cyber Security & Information Security to lead and evolve its security, risk and compliance strategy.
This is a senior leadership role requiring an individual with proven experience operating at Cyber Security Manager, Information Security Manager or Head of Information Security level within a law firm or professional services environment.
The successful candidate will take ownership of the firm’s cyber security posture, while also ensuring robust information governance, regulatory compliance and data protection standards are maintained across the business.
The Role
As Head of Cyber Security & Information Security, you will:
* Lead the firm’s cyber security and information security strategy
* Oversee proactive and reactive threat defence measures
* Ensure alignment with legal regulatory and compliance frameworks
* Work closely with senior leadership on risk management and governance
* Oversee security policies, controls, audits and reporting
* Manage and develop the in-house security function (currently 4 team members, including a Cyber Security Architect)
* Act as the firm’s senior escalation point for security incidents
Whilst architecture expertise is not essential (given the existing Cyber Security Architect), strong experience in security strategy, governance and risk management is critical.
Required Experience & Background
We are particularly interested in individuals who have:
* Operated as a Cyber Security Manager, Information Security Manager or Head of Security within a law firm
* Strong exposure to legal compliance, regulatory frameworks and information governance
* Experience working with data protection and confidentiality requirements in a legal environment
* A strong understanding of risk, audit and security governance processes
* Experience reporting to board or senior partner level
Experience within the legal sector is highly desirable due to the regulatory and client confidentiality landscape.
Technical Environment
Strong knowledge of the following technologies is required:
Microsoft Defender & Sentinel
MS E5 Security Suite
Tessian / Proofpoint
Mimecast
Azure Active Directory & on-prem Active Directory
Microsoft Endpoint Manager & Group Policy
VMware virtual server infrastructure
Citrix XenApp / XenDesktop / WEM
Windows Server & Desktop environments (with exposure to Mac/Linux beneficial)
iOS and Android device management
Networking fundamentals and LAN troubleshooting
IT Service Management systems
Personal Profile
Strategic thinker with strong commercial awareness
Ability to balance cyber resilience with regulatory compliance
Confident stakeholder communicator at senior level
Analytical and methodical problem solver
Strong leadership capability
Location & Package
Manchester based (2 days in office / 3 days remote)
£80,000 – £120,000 salary
Permanent position
Please note: the firm does not offer visa sponsorship