Head of IT Security - Birmingham

Carrington Recruitment Solutions; Birmingham; Hybrid; GBP 110,000 - 120,000; Full time

Job summary

Carrington Recruitment Solutions is seeking a senior IT security leader for a Birmingham-based law firm. The role is hybrid, with office attendance about two days per week and periodic travel to other UK sites.

You will provide both hands-on and strategic security leadership, guiding risk, compliance, and security operations across the organisation. The ideal candidate has strong experience in IAM, cloud and network security, and is capable of communicating complex security concepts to senior

Qualifications

• Senior IT security leadership experience; CISO-level exposure preferred.
• Strong knowledge of security operations, IAM, cloud and network security.
• Experience with ISO27001, Cyber Essentials Plus and CIS/NIST.
• Ability to translate risk/compliance into practical controls and plans.

Responsibilities

• Lead IT Security and Cyber Security activities.
• Hybrid role: office ~2 days/week with travel to other UK sites.
• Provide hands-on and strategic security leadership.
• Engage with senior stakeholders and technical teams to drive outcomes.
• Translate risk/compliance into practical controls and improvements.
• Manage teams, vendors and managed security services.
• Apply security expertise across security operations, IAM, cloud/network security, endpoint and email security; support Zero Trust/ZTNA.

Skills

Security leadership

Identity & access

Cloud security

Network security

Endpoint security

Zero Trust

ISO27001

CIS/NIST

Stakeholder comms

Vendor management

Job description

Salary: £110,000 - 120,000 per year

Requirements

• Senior IT security leadership experience, ideally with exposure to CISO-level responsibilities.
• Strong knowledge of security operations, identity and access management, cloud and network security, endpoint protection, email security, and modern models such as Zero Trust / ZTNA.
• Experience working with ISO27001, Cyber Essentials Plus, and recognised security frameworks such as CIS Controls or NIST.
• Ability to translate risk and compliance requirements into practical controls, services, and improvement plans.
• Experience managing teams, vendors, and managed security services, ideally in a SaaS-focused professional services environment.
• Clear communication skills, with the confidence to explain complex security topics to senior stakeholders, technical teams, and external parties.
• Pragmatic, outcome-focused, and forward-looking approach, with the resilience to work effectively under pressure.
• Proven leadership skills.
• Technical background in Infrastructure or Security, with progression into leadership.
• Experience from a Law Firm or Professional Services background is preferred.

Responsibilities

• Lead IT Security and Cyber Security activities for our organisation.
• Work in a hybrid arrangement, attending our office circa 2 days per week and travelling to other UK sites on occasions.
• Provide both hands‑on and strategic security leadership.
• Engage with senior stakeholders, technical teams, and external parties to explain security topics and drive outcomes.
• Translate risk and compliance requirements into practical controls, services, and improvement plans.
• Manage teams, vendors, and managed security services.
• Apply security expertise across areas including security operations, identity and access management, cloud and network security, endpoint protection, email security, and Zero Trust / ZTNA.
• Support our security posture using frameworks such as ISO27001, Cyber Essentials Plus, CIS Controls, and NIST.

Technologies

• Cloud
• Support
• Network
• Security

More

We are an exciting law firm based in Birmingham offering a hybrid role with office attendance circa 2 days per week and occasional travel to other UK sites. This is a senior security leadership opportunity for someone with a blended IT Security and Cyber Security background who can operate at both strategic and hands‑on levels. Salary is dependent upon experience, and we are seeking a candidate who can bring leadership, stakeholder engagement, and practical security improvement to our environment.

last updated 38 week of 2026