IS Compliance Manager

DGH Recruitment; City Of London; Hybrid; GBP 65,000; Full time

Job summary

A leading law firm in Northampton is seeking a Compliance Manager to oversee compliance programs and maintain necessary certifications such as ISO27001. The role involves providing IT compliance guidance, conducting internal assessments, and managing security training initiatives. Ideal candidates will have strong professional engagement skills and relevant certification expertise. This position offers hybrid working with 2-3 days a week on-site.

Qualifications

• Experience in business professional engagement environments.
• Knowledge of ISO27001 and Cyber Essentials certifications.
• Strong understanding of data governance and security policies.

Responsibilities

• Manage assigned compliance programs and related activities.
• Provide instructions for compliance with data governance policies.
• Conduct internal compliance assessments.

Skills

IT compliance guidance

Data governance policies

ISO27001 experience

Information Protection

Professional engagement skills

Job description

IS Compliance Manager - Law Firm - Northampton - £65k

My prestigious legal client requires a Compliance Manager to join them to manage assigned compliance programs and related activities for the firm.

Core Duties:

• Provide IT compliance guidance and recommendations across the firm.
• Provide instructions to ensure compliance with all data governance, security and usage policies.
• Maintain and improve appropriate documentation, procedures and best practices to ensure that firm retains appropriate accreditations (ISO27001, Cyber Essentials, Cyber essentials+, ISO27002 etc).
• Act as main respondent for client audits.
• Explore control deficiencies associated with IT systems and processes throughout the firm.
• Ensure internal controls and regulatory compliance across IS, following a risk‑based approach that balances efforts with risks for Information Protection.
• Develop and manage security awareness and training initiatives.
• Assist with the ongoing development of the firm's AI Policy.
• Own and manage the BCP process.
• Conduct internal compliance assessments.

This role will very much suit someone who has worked in business professional engagement environments where they've implemented and maintained ISO27001, Cyber Essentials, Cyber essentials+ certification etc.

This is more of an advisory role rather than a people management position. Good professional engagement skills are therefore required.

Hybrid working – 2‑3 days a week in Northampton – no other travel expectations.

In accordance with the Employment Agencies and Employment Businesses Regulations 2003, this position is advertised based upon DGH Recruitment Limited having first sought approval of its client to find candidates for this position.