Head of Cyber Security and Infrastructure

Holman Fenwick Willan LLP; London; On-site; GBP 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Head of Cyber Security and Infrastructure to lead its global IT team. This pivotal role involves developing and implementing security strategies, ensuring compliance with industry standards, and managing a diverse team. You will collaborate closely with the CTO to safeguard systems and data while overseeing the firm's IT infrastructure. The position offers flexible working patterns, allowing you to thrive in a dynamic environment. If you're passionate about cybersecurity and ready to make a significant impact, this opportunity is perfect for you.

Qualifications

• 5+ years of experience in cybersecurity within law firms or regulated environments.
• Strong knowledge of ISO 27001, NIST, and GDPR standards.

Responsibilities

• Lead and mentor cybersecurity and infrastructure teams.
• Manage cybersecurity strategies and oversee service delivery.
• Ensure compliance with security standards and certifications.

Skills

Cybersecurity Management

Incident Management

IT Security Systems

Analytical Skills

Leadership

Communication Skills

Education

CISM Certification

CISSP Certification

Tools

SIEM

DLP

SASE

Cloud Services

Job description

Head of Cyber Security and Infrastructure

We are seeking a Head of Cyber Security and Infrastructure to join our global Information Technology leadership team.

The department

The IT department comprises approximately 60 staff across locations including London, Paris, Piraeus, Dubai, Hong Kong, Sao Paulo, Melbourne, Perth, Singapore, and Sydney.

Our vision in the IT team is to deliver a responsive and evolving technology platform, supported by a secure, global infrastructure with data and processes at its core.

The role

This role, part of the global IT leadership team, oversees all aspects of Cybersecurity and the Firm’s IT infrastructure. It involves close collaboration with the Chief Technology Officer to ensure systems and data are secure, available, and performant, aligned with the IT Strategy.

The role requires operating at SFIA levels 6 and 7 within Information Security and Technology Service Management disciplines, including:

• Developing and implementing an enterprise information security strategy aligned with business goals.
• Ensuring compliance between business strategies and information security.
• Providing expertise, guidance, and systems for strategic and operational plans.
• Engaging with stakeholders to develop and manage services meeting security and quality standards.
• Planning and managing processes, tools, and techniques for monitoring technology service performance.

Building strong relationships with key stakeholders and leading a diverse, global team are crucial for success. Additionally, the role involves working with the CTO and IT leadership to develop technology strategy and manage the annual budget, supporting legal services delivery to clients and lawyers.

The Firm offers flexible working patterns reflecting its global nature.

Key responsibilities

• Lead, develop, and mentor the Cybersecurity and Infrastructure teams.
• Manage strategies and roadmaps for cybersecurity capabilities like email security, DLP, SASE, SIEM, etc.
• Oversee infrastructure strategies, including LANs, WANs, cloud services, etc.
• Manage budgets ensuring value and alignment with strategies.
• Maintain relationships with technology service providers and oversee service delivery.
• Lead the development and maintenance of the security controls framework and compliance.
• Manage security operations, threat monitoring, incident response, and testing.
• Define and steer cybersecurity programs, ensuring industry best practices and emerging threats are addressed.
• Ensure renewal of key certifications like Cyber Essentials+ and ISO27001.
• Participate in the Risk Committee.
• Collaborate on security policies, procedures, and standards across the IT estate.
• Lead incident management, response, and tabletop exercises.
• Oversee security awareness, training, and communication initiatives.
• Report on the effectiveness of security controls and compliance.
• Participate in security assessments, audits, and client questionnaires.
• Support professional development of security and infrastructure teams.
• Perform any other ad hoc duties as required.

Key skills and experience required

• Minimum 5 years’ relevant experience in a law firm or regulated environment.
• Certifications such as CISM, CISSP.
• Experience with IT security systems, governance, incident management, and best practices.
• Deep knowledge of security and infrastructure principles and tools.
• Familiarity with standards like ISO 27001, NIST, GDPR.
• Strong analytical, problem-solving, and communication skills.
• Leadership experience supporting security professionals.

Additional Information

This job description is not contractual and may be amended. HFW promotes equality and diversity. All applications are considered on merit.

HFW processes personal data in accordance with its Privacy Notice, available on our website.

HFW is a global law firm with over 700 lawyers, supporting clients across various industries with a focus on legal expertise and commercial solutions.