Information Security Manager

Picture More Ltd; City Of London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading legal firm is seeking an experienced Information Security Manager to lead the information security function. This role involves developing security strategies, ensuring compliance with ISO 27001 and Cyber Essentials Plus, and managing a small team. Ideal candidates will have strong leadership experience in IT security and a track record of successful project management in security operations.

Qualifications

• Experience in developing and delivering information security strategies.
• Proven leadership skills in managing IT security teams.
• Strong understanding of operational security measures.

Responsibilities

• Develop and deliver the firm’s information security strategy.
• Lead and mentor a small team of IT security professionals.
• Own ISO 27001 implementation and Cyber Essentials Plus certification.
• Manage operational security activities and incident responses.
• Build strong relationships with stakeholders.

Skills

ISO 27001

Cyber Essentials Plus

Team leadership

Incident response

Security project management

Job description

We’re recruiting on behalf of a leading legal firm for an Information Security Manager to lead and strengthen their information security function. This is a hands‑on, strategic role where you’ll manage a small team, oversee ISO 27001 and Cyber Essentials Plus compliance, and drive continuous improvement across the business.

What You’ll Do:

• Develop and deliver the firm’s information security strategy.
• Lead and mentor a small team of IT security professionals.
• Own ISO 27001 implementation and Cyber Essentials Plus certification.
• Manage operational security: endpoint protection, M365 security, SIEM/SOC, vulnerability management, and incident response.
• Lead security projects and embed “Secure by Design” principles across initiatives.
• Build strong relationships with stakeholders and deliver security awareness training.