Head of Information Security

Kingsley Napley; Greater London; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Pension

Life assurance

Private medical insurance

Dental insurance

Annual salary review

Discretionary performance award

Employee Assistance programme

Therapy sessions

Cycle to work

GymFlex

Job summary

Kingsley Napley is seeking a Head of Information Security to lead and develop the firm’s cyber security capabilities, ensuring confidentiality, integrity and availability of information systems, data and services. You will report to the CIO and own the ISO27001 ISMS and Cyber Essentials Plus certification, plus wider security policies.

You will drive strategy, maturity and governance, mentor the team and collaborate with senior stakeholders across Legal, IT Operations and Data to support

Qualifications

• Proven track record owning and improving ISO27001 information security governance.
• Experience managing outsourced security partners, SOCs and incident response.
• Strong understanding of security operations, threat detection and remediation planning.
• Good knowledge of cloud security, Azure environments and SaaS assurances.

Responsibilities

• Develop and lead the firm's cyber security strategy in line with goals and risk appetite.
• Own and continuously improve security capability, roadmap and maturity.
• Manage and improve the outsourced SOC and security operations functions.
• Maintain ISO27001 and Cyber Essentials Plus certifications and related policies.
• Lead, develop and mentor Information Security team members.

Skills

Information security leadership

ISO27001 expertise

SOC management

Cloud security / Azure

Security architecture

Job description

Kingsley Napley is seeking a Head of Information Security to lead and develop the firms cyber security capabilities ensuring the confidentiality, integrity and availability of the firm’s information systems, data and services. .

Reporting into the Chief Information Officer you will maintain ownership of the firm’s ISO27001 Information Security Management System and Cyber Essentials Plus certification plus the wider security policies and standards.

What you’ll do

• Develop and deliver the firm's cyber security strategy in line with the firm’s goals and risk appetite.
• Lead and continuously improve the firm's cyber security capability, roadmap and maturity.
• Own and manage the firm's security operations capability.
• Manage and continuously improve the firm's outsourced Security Operations Centre (SOC).
• Maintain responsibility for ISO27001 and Cyber Essentials Plus certification
• Lead, develop and mentor members of the Information Security team.

What we’re looking for

• Strong information security leadership experience, ideally within a legal, professional services or similarly regulated environment.
• Proven track record of owning, maintaining and continuously improving ISO27001 certification and associated information security governance.
• Experience managing outsourced security partners, including SOC services, incident response providers, and specialist security suppliers.
• Strong understanding of security operations, vulnerability management, threat detection, incident response, and remediation planning.
• Good understanding of cloud security, Microsoft/Azure environments, infrastructure security, SaaS assurance, and security architecture principles.

Kingsley Napley is known for its collaborative culture, high-quality work and commitment to inclusion. The role will work closely with the Chief Legal Officer to support the firms wider governance and compliance matters plus the Head of IT Operations, Head of Data and other key business stakeholders throughout the firm.

• Pension
• Life assurance, permanent health insurance, private medical insurance and dental insurance
• Annual salary review, promotion opportunities and discretionary performance award
• 24/7 available Employee Assistance & Therapy programme
• 6 free 1-1 therapy sessions through Self Space
• Cycle to work scheme and in-office bike storage, season ticket loan
• Health screenings
• Holiday buy/sell/bank
• GymFlex: discounted gym rates, wellness subsidy, gym loan