Head of Information Security - ISO27001 & SOC Strategy

Kingsley Napley LLP; Greater London; On-site; GBP 120,000 - 160,000; Full time

Benefits offered by this job

Pension

Life assurance

Private medical insurance

Dental insurance

Annual salary review

Discretionary performance award

Employee Assistance Program

Therapy sessions

Cycle to work scheme

Bike storage in-office

Season ticket loan

Health screenings

Holiday buy/sell/bank

GymFlex: gym subsidy

Job summary

Kingsley Napley LLP is seeking a Head of Information Security to lead and develop the firm’s cyber security capabilities, safeguarding information systems, data and services. Reporting to the CIO, you will own ISO27001 SIEM and Cyber Essentials Plus programs and shape security policies across the firm.

You will drive the security strategy, lead the team, manage outsourced SOC partners, and collaborate with senior stakeholders to uphold governance and risk management across the business.

Qualifications

• Strong information security leadership experience, preferably in regulated environments.
• Proven track record of owning and maintaining ISO27001 certification and governance.
• Experience managing outsourced security partners including SOC services and incident response providers.

Responsibilities

• Develop and deliver the firm's cyber security strategy in line with goals and risk appetite.
• Lead and improve the firm's cyber security capability, roadmap and maturity.
• Own and manage the firm's security operations capability.
• Manage and improve the outsourced Security Operations Centre (SOC).
• Maintain responsibility for ISO27001 and Cyber Essentials Plus certification.
• Lead, develop and mentor Information Security team members.

Skills

Information security leadership

ISO27001 governance

Security operations

Threat detection

Incident response

Cloud security

Azure environments

Security architecture

Tools

Azure

Job description

Kingsley Napley LLP is seeking a Head of Information Security to lead and develop the firm’s cyber security capabilities, safeguarding information systems, data and services. Reporting to the CIO, you will own ISO27001 SIEM and Cyber Essentials Plus programs and shape security policies across the firm.

You will drive the security strategy, lead the team, manage outsourced SOC partners, and collaborate with senior stakeholders to uphold governance and risk management across the business.