Head of Information Security

MJA (London) Ltd; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

MJA (London) Ltd is seeking a seasoned Head of Information Security to shape and mature the organisation's cyber security strategy, ensuring confidentiality, integrity and availability of information, systems and services.

Reporting to the CIO, you will own the information security framework, drive ISO 27001 and Cyber Essentials Plus programs, and lead security operations while managing external partners and a skilled security team.

Qualifications

• Strong information security leadership experience, ideally within legal, professional services or another regulated environment.
• Proven experience owning and improving ISO 27001 and security governance.
• Experience managing outsourced SOC and security partners.
• Strong knowledge of security operations, threat detection, incident response and vulnerability management.
• Good understanding of Microsoft/Azure, cloud security, SaaS assurance and security architecture.

Responsibilities

• Develop and implement the information security strategy and roadmap.
• Own ISO 27001 and Cyber Essentials Plus compliance.
• Lead security operations and manage outsourced SOC partners.
• Oversee incident response, vulnerability management and remediation.
• Work with external security partners and suppliers.
• Lead and mentor the Information Security team and collaborate with IT, Legal, Data and business units.

Skills

Security leadership

ISO 27001

Security governance

SOC management

Incident response

Vulnerability management

Cloud security

Microsoft Azure

Security architecture

Stakeholder management

Job description

Head of Information Security

We are seeking an experienced Head of Information Security to lead and develop the organisation's cyber security strategy, ensuring the confidentiality, integrity and availability of information, systems and services.

Reporting to the CIO, you will own the organisation's information security framework, including ISO 27001 and Cyber Essentials Plus, while leading the security roadmap and wider security operations.

Key Responsibilities

• Develop and deliver the cyber security strategy and roadmap.
• Own and continuously improve ISO 27001 and Cyber Essentials Plus.
• Lead security operations and manage an outsourced SOC.
• Oversee incident response, vulnerability management and remediation.
• Manage external security partners and specialist suppliers.
• Lead and mentor the Information Security team.
• Work closely with senior stakeholders across IT, Legal, Data and the wider business.

Key Requirements

• Strong information security leadership experience, ideally within legal, professional services or another regulated environment.
• Proven experience owning and improving ISO 27001 and security governance.
• Experience managing outsourced SOC and security partners.
• Strong knowledge of security operations, threat detection, incident response and vulnerability management.
• Good understanding of Microsoft/Azure, cloud security, SaaS assurance and security architecture.

This is a senior leadership opportunity to shape and mature the organisation's information security capability.