Head of IT Security, Professional Services, Cyber

Carrington Recruitment Solutions Limited; Birmingham; On-site; GBP 90,000 - 130,000; Full time

Job summary

Carrington Recruitment Solutions Limited, Birmingham, is seeking a Head of IT Security for a leading law firm. The role is hybrid, requiring presence in the office around two days per week and occasional travel to UK sites.

You will blend a technical security background with strategic leadership, oversee security operations, risk and compliance, and communicate complex topics to senior stakeholders. Prior experience in law firms or professional services is preferred.

Qualifications

• Senior IT security leadership experience, ideally with exposure to CISO-level responsibilities.
• Strong knowledge of security operations, identity and access management, cloud and network security, endpoint protection, email security and modern models such as Zero Trust / ZTNA.
• Experience working with ISO27001, Cyber Essentials Plus and recognised security frameworks such as CIS Controls or NIST.
• The ability to translate risk and compliance requirements into practical controls, services and improvement plans.
• Experience managing teams, vendors and managed security services, ideally in a SaaS-focused professional services environment.
• Clear communication skills, with the confidence to explain complex security topics to senior stakeholders, technical teams and external parties.
• A pragmatic, outcome-focused and forward-looking approach, with the resilience to work effectively under pressure.

Skills

Leadership

Security leadership

Stakeholder engagement

Zero Trust / ZTNA

Cloud security

Job description

Head of IT Security, Head of Cyber Security, ISO27001, NIST, CISM, CISO, Birmingham

Head of IT Security required to work for an exciting Law Firm based in Birmingham. This will be a hybrid role where you will be expected to be in the office circa 2 days per week, along with travelling to other UK sites on occasions.

We need someone with a blended Security background within IT Security, along with Cyber Security. You will be very familiar with CISO set-ups too and will be hands on, as well as strategic. Ideally we are looking for someone from a Law Firm background, or Professional Services at the very least.

Ideally you will come from a technical background, whether this be Infrastructure or Security and have then blossomed into Leadership. You MUST have proven Leadership skills too.

Experience Required:

We are looking for someone who combines senior security expertise with pragmatic leadership and strong stakeholder engagement. You will bring:

• Senior IT security leadership experience, ideally with exposure to CISO-level responsibilities.
• Strong knowledge of security operations, identity and access management, cloud and network security, endpoint protection, email security and modern models such as Zero Trust / ZTNA.
• Experience working with ISO27001, Cyber Essentials Plus and recognised security frameworks such as CIS Controls or NIST.
• The ability to translate risk and compliance requirements into practical controls, services and improvement plans.
• Experience managing teams, vendors and managed security services, ideally in a SaaS-focused professional services environment.
• Clear communication skills, with the confidence to explain complex security topics to senior stakeholders, technical teams and external parties.
• A pragmatic, outcome-focused and forward-looking approach, with the resilience to work effectively under pressure.

This is a great opportunity and salary is dependent upon experience.