Head of Information Security

Kingsley Napley LLP; Greater London; On-site; GBP 120,000 - 160,000; Full time

Benefits offered by this job

Pension

Life assurance

Private medical insurance

Dental insurance

Annual salary review

Discretionary performance award

Employee Assistance Program

Therapy sessions

Cycle to work scheme

Bike storage in-office

Season ticket loan

Health screenings

Holiday buy/sell/bank

GymFlex: gym subsidy

Job summary

Kingsley Napley LLP is seeking a Head of Information Security to lead and develop the firm’s cyber security capabilities, safeguarding information systems, data and services. Reporting to the CIO, you will own ISO27001 SIEM and Cyber Essentials Plus programs and shape security policies across the firm.

You will drive the security strategy, lead the team, manage outsourced SOC partners, and collaborate with senior stakeholders to uphold governance and risk management across the business.

Qualifications

• Strong information security leadership experience, preferably in regulated environments.
• Proven track record of owning and maintaining ISO27001 certification and governance.
• Experience managing outsourced security partners including SOC services and incident response providers.

Responsibilities

• Develop and deliver the firm's cyber security strategy in line with goals and risk appetite.
• Lead and improve the firm's cyber security capability, roadmap and maturity.
• Own and manage the firm's security operations capability.
• Manage and improve the outsourced Security Operations Centre (SOC).
• Maintain responsibility for ISO27001 and Cyber Essentials Plus certification.
• Lead, develop and mentor Information Security team members.

Skills

Information security leadership

ISO27001 governance

Security operations

Threat detection

Incident response

Cloud security

Azure environments

Security architecture

Tools

Azure

Job description

Kingsley Napley is seeking a Head of Information Security to lead and develop the firms cyber security capabilities ensuring the confidentiality, integrity and availability of the firm’s information systems, data and services. .

Reporting into the Chief Information Officer you will maintain ownership of the firm’s ISO27001 Information Security Management System and Cyber Essentials Plus certification plus the wider security policies and standards.

What you’ll do

• Develop and deliver the firm's cyber security strategy in line with the firm’s goals and risk appetite.
• Lead and continuously improve the firm's cyber security capability, roadmap and maturity.
• Own and manage the firm's security operations capability.
• Manage and continuously improve the firm's outsourced Security Operations Centre (SOC).
• Maintain responsibility for ISO27001 and Cyber Essentials Plus certification
• Lead, develop and mentor members of the Information Security team.

What we’re looking for

• Strong information security leadership experience, ideally within a legal, professional services or similarly regulated environment.
• Proven track record of owning, maintaining and continuously improving ISO27001 certification and associated information security governance.
• Experience managing outsourced security partners, including SOC services, incident response providers, and specialist security suppliers.
• Strong understanding of security operations, vulnerability management, threat detection, incident response, and remediation planning.
• Good understanding of cloud security, Microsoft/Azure environments, infrastructure security, SaaS assurance, and security architecture principles.

Kingsley Napley is known for its collaborative culture, high-quality work and commitment to inclusion. The role will work closely with the Chief Legal Officer to support the firms wider governance and compliance maters plus the Head of IT Operations, Head of Data and other key business stakeholders throughout the firm.

• Pension
• Life assurance, permanent health insurance, private medical insurance and dental insurance
• Annual salary review, promotion opportunities and discretionary performance award
• 24/7 available Employee Assistance & Therapy programme
• 6 free 1-1 therapy sessions through Self Space
• Cycle to work scheme and in-office bike storage, season ticket loan
• Health screenings
• Holiday buy/sell/bank
• GymFlex: discounted gym rates, wellness subsidy, gym loan