Information Security Manager

Ward Hadaway; Newcastle upon Tyne; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

Enhanced pension

Life assurance

Health and wellbeing benefits

25 days annual leave

Job summary

Ward Hadaway is recruiting an Information Security Manager to join the Risk and Compliance team, based from Newcastle or Leeds. You will drive a pragmatic, risk-based approach to protect client, employee and corporate information, and advise the IT team on security implications of changes and upgrades.

You will oversee ISO27001, Cyber Essentials and GDPR programmes, lead governance and risk assessments, and contribute to information governance initiatives across the firm.

Qualifications

• Proven leadership in information security within a professional services environment.
• In-depth knowledge of Data Protection Act 2018, UK GDPR and related regimes.
• Experience managing ISO27001 and Cyber Essentials Plus; familiarity with privacy impact assessments.

Responsibilities

• Manage ISO27001, Cyber Essentials, GDPR compliance programmes.
• Lead information security risk assessment programme and information governance initiatives.
• Advise on security implications of software/hardware deployments.
• Draft and monitor information security policies; monitor compliance and response plans.
• Investigate data breaches and support GDPR compliance efforts.

Skills

Leadership

Data protection knowledge

ISO27001 / Cyber Essentials

GDPR compliance

Communications

Risk assessment

Stakeholder management

Information security controls

Job description

This is a Permanent , Full Time vacancy that will close in 18 days at 23:59 GMT .

The Vacancy

We are looking for an Information Security Manager to join our Risk and Compliance team to be located from either our Newcastle or Leeds office.

The successful candidate will be expected to work with the wider firm to deliver a commercial, pragmatic, effective and risk-based approach to activities that provide appropriate access to, and protect the confidentiality, availability and integrity of client, employee, and corporate information. In addition, you will work with the firm's IT team on an on-going basis by providing advice and consultancy regarding the information security implications of any software and hardware implementations, changes and upgrades.

There will also be some involvement in advising and drafting of information security policies, monitoring compliance, provide assistance in relation to the assessment of cyber security risks, mitigation initiatives and assist with the firm’s cyber security and information security incident response plans.

What will I be doing?

The successful candidate will be responsible for managing the firm’s ISO27001, Cyber Essentials, GDPR compliance programmes and managing an on-going information security risk assessment programme, as well as initiating and managing information governance initiatives.

The role will play a key part in supporting the firm's information security and compliance objectives including, but not limited to:

• Data breaches
• Security controls
• Governance and regulatory compliance
• Manage ISO 27001
• Assist with cyber security from an info sec angle
• Support GDPR compliance
• Investigate personal data breaches

You'll have

• Strong leadership in driving security initiatives within a firmwide context.
• In-depth knowledge of data protection legislation (Data Protection Act 2018, UK and EU GDPR).
• Proven experience in a similar role, preferably within a law firm or professional services environment.
• Expertise in information and cyber security controls, particularly ISO27001 and Cyber Essentials Plus, and comprehension of technical IT concepts.
• Robust understanding of technical and organisational security controls, with a keen ability to evaluate and mitigate risks.
• Industry certifications such as CISSP or CISM are highly desirable.
• Exceptional communication skills, with the ability to convey technical issues clearly to diverse audiences.
• Strong relationship-building skills.
• Excellent problem-solving and decision-making skills.
• Proven ability to work both as part of a team and individually with a flexible "can-do" attitude.

Desirable skills and attributes

• Preferably CISM Certified (Certificate in Information Security Management)

About us

We're proud to be an independent, full-service law firm providing exceptional legal expertise to businesses, the built environment, healthcare, the public and third sectors, and private individuals. With several office locations around the UK we're one of the UK's Top 100 law firms. When you join us you’ll be part of a team of over 500 passionate and talented individuals who take pride in offering an exciting and supportive environment allowing you to thrive.

We're passionate about promoting wellbeing and equality, diversity and inclusion, with dedicated committees to support ongoing efforts. We recognise that a healthy and thriving Firm filled with individuality and differences strengthens our teams, our clients and our communities.

What we can offer you

We’re committed to being a firm focused on support, development, wellbeing and inclusion and we’re always striving to improve. Our commitment to this has been recognised by our achievement of our Gold Investors in People award and by our Hive HR Employee Voice certification.

We reward our people with a whole range of benefits, some core and some flexible, designed to shape a reward package that’s right for you – now and in the future. Our core benefits include:

• An enhanced pension scheme with employer matched contributions of up to 6%.
• 25 days' annual leave + bank holidays (increasing to 28 days with length of service). There is also the option to purchase up to 5 additional days.
• Life assurance cover of 4 times basic salary, with the option to purchase additional cover.
• A range of health and wellbeing benefits.
• Hybrid working with a minimum requirement of 2 days per week working from one of our offices.
• We also have a flexible benefits programme where you can purchase a wide range of additional benefits.

If you would like to request further information or to discuss the role, please contact [e-mail] quoting vacancy reference NTX1247087.

If you require any adjustments to be made to our recruitment process, please request a call back via the above email address.

Agencies - please note that we are not currently instructing agents to support with this role. Please do not send speculative CVs.

The Company

Ward Hadaway is a full-service, UK Top 100 law firm providing exceptional legal expertise to businesses, public and third sectors, and individuals.

From our offices in Birmingham, Leeds, Manchester, Newcastle and Teesside, we combine regional strength with national influence to deliver high-quality, tailored solutions that drive success for our clients.

We remove ambiguity and provide a clear direction and certainty. We build trust with each other and our clients through honest, transparent interactions.

• Respectful

We succeed together. We build and maintain an inclusive firm in which difference is recognised, valued and harnessed.

• Ambitious

We constantly strive and innovate to be the best we can be for ourselves, our teams and the firm.