Cyber Security Manager, Leeds

Addleshaw Goddard LLP; Leeds; On-site; GBP 70,000 - 110,000; Full time

Job summary

Addleshaw Goddard LLP is seeking a Cyber Security Lead to steer a high-performing security team, protect client data, and align IT security services with ISO27001 and ITIL frameworks. You will drive cloud security, vulnerability management and incident response across the firm.

The role requires leadership, deep security expertise, and the ability to collaborate with cross-functional teams to maintain a secure infrastructure and deliver value to clients.

Qualifications

• Must have proven track record in leading a technical security team.
• Demonstrated history of planning, development and implementation of Azure security related technologies.
• Strong understanding of infrastructure and security technologies and ISMS principles.

Responsibilities

• Lead day-to-day Cyber Security Team operations, ensure resource coverage and process adherence.
• Act as deputy for Cyber Security Manager when needed.
• Oversee security cloud migration and remediate gaps identified.
• Conduct 1:1 performance discussions and manage escalations.
• Maintain security of IT services, coordinate patching, vulnerability remediation and hardening.
• Create/update security documentation and procedures for consistent support.
• Collaborate with IT departments to secure new and existing systems.
• Lead incident response, run war games, and coordinate with third parties when needed.
• Investigate post-incident forensics and report findings.

Skills

Leadership

Azure security

Security architecture

SIEM

Incident response

Communication

Education

Security-related degree or equivalent

Tools

SIEM (Splunk)

Firewall technologies

Vulnerability management tools

Threat detection systems

Job description

PURPOSE OF THE ROLE

The primaryresponsibility of the Cyber Security Lead is to provide leadership in maintaining the integrity and availability of our clients' data and provide an interface for cyber security throughout the IT Department. As a result, the Cyber Security Lead must have excellent leadership and analytical skills as well as a thorough knowledge of the company's products, services, and Service Management processes. The Cyber Security Lead will use their advanced knowledge and technical expertise, coupled with their dedication to customer service, to maintain a secure infrastructure for the data of the company and its customers.

WHAT TO EXPECT IN THISROLE

In thisrole, you will:

• Responsible for the day-to-day management of the Cyber Security Team, e.g. defining and managing rotas to ensure the right level of resource, proactive quality review of team activities and adherence to defined processes and procedures
• Confidently deputise for the Cyber Security Manager when required/they are not available
• Create and manage the Security cloud migration process. Highlight any gaps from experience and work to remediate them
• Manage 1:1 performance meeting with the team
• Actively manage complaints and escalations and proactively act to identify and action issues before they become complaints/escalations
• Development, management and maintenance of the security of the Firm's IT services, including liaising with third parties to ensure patching, resolving vulnerabilities and hardening systems as required
• Create and update security support documentation, including processes and procedures to ensure a consistent and effective support performance
• Work with all areas of the IT Department to ensure security of the infrastructure from the implementation of new systems through to the maintenance and monitoring of existing systems
• An ability to lead a team in an often demanding environment, give constructive feedback and work with the team to develop individual and team performance
• In and Out of Hours security response escalation point for any incident management
• Manage the Cyber Security Incident process/procedure, and the Cyber security Incident Response Team, leading war games and cyber security incident scenarios alongside the Cyber Security Manager to provide the IT department with the skills and knowledge of addressing any real cyber security incidents
• Manage post-cyber security incident forensic investigations and reporting, bringing in third party specialists if deemed necessary
• Keep up-to-date with the latest security threats, news principles, techniques and protocols. In particular, staying up-to-date with new security vulnerabilities and acting upon them out of hours if necessary.
• Operate in an ITIL V3 & ISO27001 focused service delivery framework
• Stakeholder Management
• Work to defined Service Level Agreements and Key Performance Indicators

AREAS OF KNOWLEDGE AND EXPERTISE

You will have:

• A proven track record in leading/team leading a technical security team
• A demonstrated history of planning, development and implementation of Azure security related technologies
• An excellent understanding of infrastructure and application technologies: Server 2012+, ESX/VMware, Messaging (Exchange 2016+), IIS, SQL 2012+, Linux appliances, architecture and OS, Back-up technologies, Citrix, and Cisco networking
• An excellent understanding of security technologies: SIEM, firewalls, intrusion detection/prevention systems, anti-virus software, authentication systems, log management, content filtering, etc.
• An excellent understanding of security approaches: ISMS, risk analysis and assessments, the CIA triad, attack vectors including social engineering, cryptography, confidentiality issues and cyber security incident response best practices, including triage and chain of custody
• Proactively identifies areas for improvement, shares lessons learned with colleagues and encourages others to do the same, customer focused with a passion and drive to deliver customer satisfaction and value to the business
• Dedicated and responsible with a strong commitment to the assigned task with the ability to work under pressure, to meet deadlines and to work independently and/or with some supervision
• Self-driven and ability to work independently and interact effectively with people at all levels, with good communication and interpersonal skills
• Excellent problem solving and trouble shooting skills. In particular the ability to see patterns and solutions where others may not, attention to detail, analytical abilities and the ability to recognise trends in data
• Personal behaviours and values that nurture openness, honesty, trust, mutual respect and support from all team members in line with service excellence ideals
• The Cyber Security Lead should ideally have qualifications in some of the following: Security+, SSCP, CISP, CEH, CCNA, CCNA Security, OSCP, MCSE, a computing/security related BSc/MSc degree or other appropriate qualifications would be beneficial

OUR FIRM

Our story ofinternational growth is built on a performance mindset, innovation and true collaboration. We believe results follow relationships, so we work closely with each other, and develop deep client connections to deliver.

Our award-winning culture balances high standards and hard work with genuine care – looking out for each other, supporting professional development, in a down to earth and inclusive environment. We do the right things in the right ways, combining commercial excellence and innovative thinking with teamwork. Together, we deliver excellence, achieve stand out solutions, and enable career-defining opportunities.

We are open to flexibility in how this role is structured for the right candidate. While it is envisaged as a full-time position, with the same time and commitment demands as any other transactional real estate lawyer role, we also welcome applications from candidates seeking either part-time arrangements, or arrangements with a greater degree of certainty around working hours, with appropriate adjustment to salary expectations. We are committed to supporting flexible working where possible and are happy to discuss how the role could be shaped to meet both business needs and the preferences of the successful candidate.