Head of Information Security

MJA (London) Limited; Greater London; On-site; GBP 120,000 - 150,000; Full time

Job summary

We are seeking an experienced Head of Information Security to lead and develop the organisation's cyber security strategy, ensuring the confidentiality, integrity and availability of information, systems and services.

Reporting to the CIO, you will own the organisation's information security framework, including ISO 27001 and Cyber Essentials Plus, while leading the security roadmap and wider security operations.

Qualifications

• Senior information security leadership in a regulated environment (legal preferred).
• Experience owning ISO 27001 and security governance.
• Proven ability to manage outsourced SOC and security partners.
• Strong knowledge of threat detection, incident response and vulnerability management.

Responsibilities

• Develop and deliver the cyber security strategy and roadmap.
• Own and continuously improve ISO 27001 and Cyber Essentials Plus.
• Lead security operations and manage an outsourced SOC.
• Oversee incident response, vulnerability management and remediation.
• Manage external security partners and specialist suppliers.
• Lead and mentor the Information Security team.
• Work closely with senior stakeholders across IT, Legal, Data and the wider business.

Skills

Information security leadership

ISO 27001 governance

SOC management

Incident response

Vulnerability management

Cloud security (Azure)

Security architecture

Job description

We are seeking an experienced Head of Information Security to lead and develop the organisation's cyber security strategy, ensuring the confidentiality, integrity and availability of information, systems and services.

Reporting to the CIO, you will own the organisation's information security framework, including ISO 27001 and Cyber Essentials Plus, while leading the security roadmap and wider security operations.

You MUST have experience of working at a law firm.

Key Responsibilities

• Develop and deliver the cyber security strategy and roadmap.


• Own and continuously improve ISO 27001 and Cyber Essentials Plus.


• Lead security operations and manage an outsourced SOC.


• Oversee incident response, vulnerability management and remediation.


• Manage external security partners and specialist suppliers.


• Lead and mentor the Information Security team.


• Work closely with senior stakeholders across IT, Legal, Data and the wider business.

Key Requirements

• Strong information security leadership experience, ideally within legal, professional services or another regulated environment.


• Proven experience owning and improving ISO 27001 and security governance.


• Experience managing outsourced SOC and security partners.


• Strong knowledge of security operations, threat detection, incident response and vulnerability management.


• Good understanding of Microsoft/Azure, cloud security, SaaS assurance and security architecture.

This is a senior leadership opportunity to shape and mature the organisation's information security capability.