Head of IT Security, Professional Services, Cyber

Carrington Recruitment Solutions Limited; Leeds; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Carrington Recruitment Solutions Limited in Leeds is seeking a Head of IT Security with senior leadership experience to steer cyber security for a leading law/Professional services firm's IT estate.

The role is hybrid, requiring in-office presence about 2 days per week, with occasional travel to UK sites. You will oversee security operations, risk and compliance, and report to senior stakeholders.

Qualifications

• Senior IT security leadership with CISO-level responsibilities.
• Strong knowledge of security operations, IAM, cloud and network security.
• Experience with ISO27001, Cyber Essentials Plus and NIST/CIS Controls.
• Ability to translate risk and compliance into practical controls and improvement plans.
• Proven success leading teams and vendors in a SaaS/professional services environment.

Responsibilities

• Lead security strategy and incident response planning.
• Engage with senior stakeholders to translate risk into pragmatic controls.
• Oversee security operations, IAM, cloud, network and endpoint security.
• Manage security vendors and internal security teams in a SaaS/professional services setting.

Skills

Senior leadership

CISO responsibilities

ISO27001

NIST

Zero Trust

IAM

Cloud security

Network security

Stakeholder comms

Job description

Head of IT Security, Head of Cyber Security, ISO27001, NIST, CISM, CISO, Leeds

Head of IT Security required to work for an exciting Law Firm based in Leeds, West Yorkshire. This will be a hybrid role where you will be expected to be in the office circa 2 days per week, along with travelling to other UK sites on occasions.

We need someone with a blended Security background within IT Security, along with Cyber Security. You will be very familiar with CISO set-ups too and will be hands on, as well as strategic. Ideally we are looking for someone from a Law Firm background, or Professional Services at the very least.

Ideally you will come from a technical background, whether this be Infrastructure or Security and have then blossomed into Leadership. You MUST have proven Leadership skills too.

Experience Required:
We are looking for someone who combines senior security expertise with pragmatic leadership and strong stakeholder engagement. You will bring:

• Senior IT security leadership experience, ideally with exposure to CISO-level responsibilities.
• Strong knowledge of security operations, identity and access management, cloud and network security, endpoint protection, email security and modern models such as Zero Trust / ZTNA.
• Experience working with ISO27001, Cyber Essentials Plus and recognised security frameworks such as CIS Controls or NIST.
• The ability to translate risk and compliance requirements into practical controls, services and improvement plans.
• Experience managing teams, vendors and managed security services, ideally in a SaaS-focused professional services environment.
• Clear communication skills, with the confidence to explain complex security topics to senior stakeholders, technical teams and external parties.
• A pragmatic, outcome-focused and forward-looking approach, with the resilience to work effectively under pressure.

This is a great opportunity and salary is dependent upon experience.