Chief Information Security Officer (CISO)

DAC Beachcroft LLP; England; Hybrid; GBP 180,000 - 240,000; Full time

Benefits offered by this job

Private medical insurance

Income protection insurance

Discounted gym membership

Flexible working arrangements

ESG activities participation

Job summary

DAC Beachcroft LLP is seeking a Chief Information Security Officer (CISO) to own our information security strategy, regulatory compliance, and cyber resilience across the organisation. You will shape security governance, manage risk, and lead a response to evolving threats while maintaining client trust.

Working with senior leadership, you will partner with the CTO, legal, and risk teams to ensure GDPR compliance, DPIAs, data processing agreements, and data subject rights.

Qualifications

• Significant experience in information security leadership roles.
• Proven knowledge of GDPR, UK GDPR, and data protection regulations.
• Experience in incident response, breach management, and forensics.
• Strong governance, policy development, and regulatory reporting.
• Experience with Microsoft Azure and cloud security controls.

Responsibilities

• Develop and own the information security strategy, roadmap, and risk framework.
• Coordinate security incident response with MSSP and stakeholders.
• Ensure GDPR and data protection compliance including DPIAs and data subject requests.
• Maintain SRA compliance and information security standards.
• Manage third-party security assessments and vendor risk reviews.
• Establish security controls for data classification, access, encryption, monitoring.
• Promote security awareness through training and exercises.
• Provide leadership reporting to executives and regulators.

Skills

Information security leadership

Regulatory compliance

GDPR knowledge

Incident response

Cloud security (Azure)

Tools

Microsoft Azure

Job description

Chief Information Security Officer (CISO)

Department: CSG - Business Operations (Audit / Risk / Client Account Management / Finance / Legal / People / Procurement / Property and Facilities / Sales and BD / IT)

Employment Type: Permanent

Location: Remote - England and Wales

Description

Are you an experienced information security leader looking to make a real impact? We're seeking a Chief Information Security Officer (CISO) to take ownership of our information security strategy, regulatory compliance, and cyber resilience framework.

As CISO, you will play a pivotal role in protecting sensitive client data, legal case information, and financial records while ensuring compliance with GDPR, SRA requirements, and broader regulatory obligations. This is a strategic leadership position offering the opportunity to shape and mature our security posture across the organisation.

About the Role

Working closely with the Chief Technology Officer and senior leadership team, you will develop and implement a comprehensive security strategy that protects the business from evolving cyber threats while maintaining regulatory compliance and client trust.

You will act as the organisation's subject matter expert for information security, data protection, risk management, and incident response.

What you will do?

• Develop and own the organisation's information security strategy, roadmap, and risk management framework.
• Working with our MSSP, lead the response to security incidents, coordinating investigations, remediation activities, and stakeholder communications.
• Working with our Group Legal and colleagues, implement effective risk and compliance governance to ensure GDPR and data protection compliance, including DPIAs, data processing agreements, and data subject requests.
• Ensure compliance with Solicitors Regulation Authority (SRA) requirements and relevant information security standards.
• Manage third-party security assessments and vendor risk reviews, including technology, finance, and AI solution providers.
• Establish and maintain security controls covering data classification, access management, encryption, monitoring, and logging.
• Drive a culture of security awareness through training, education, and incident response exercises.
• Manage relationships with external Managed Security Service Providers (MSSPs) to ensure effective service delivery and governance.
• Provide clear, business-focused reporting on security risks to executive leadership and regulators where required.

Who you are

• Significant experience in information security, including leadership experience at CISO, Head of Security, or equivalent level.
• Strong knowledge of GDPR, UK GDPR, the Data Protection Act 2018, and wider UK regulatory requirements.
• Experience operating within highly regulated environments.
• Proven experience in cyber incident response, breach management, and digital forensics.
• Strong understanding of the latest information security technologies and best practice deployment, particularly within Microsoft Azure environments.
• Excellent communication and stakeholder management skills with the ability to translate technical risks into business language.
• Experience developing security strategies, policies, and governance frameworks.

What's in it for you?

• High levels of flexibility and a great work life balance - https://www.dacbeachcroft.com/en/Work-with-us/Whats-in-it-for-you
• A well-rounded remuneration package (which includes private medical insurance, income protection insurance and discounted gym membership, amongst many other benefits)
• Opportunities for growth and progression including professional funding
• In person and remote social events
• Opportunity to get involved in a range of Environmental, Social and Governance (ESG) activities

We are dedicated to building a diverse, inclusive and authentic workplace, which aligns closely to our cultural principles (Determined, Clear, Creative and Supportive).