IS Compliance Manager

DGH Recruitment Limited; Northampton; Hybrid; GBP 55,000 - 65,000; Full time

Job summary

A leading legal firm in Northampton is seeking an IS Compliance Manager to oversee compliance programs and ensure adhearance to data governance policies. The ideal candidate will have experience with ISO27001 and Cyber Essentials certifications, offering a strong advisory approach. This is a hybrid role requiring 2-3 days a week in the office, focusing on compliance assessments and maintaining accreditation standards.

Qualifications

• Experience implementing and maintaining ISO27001 and Cyber Essentials certifications.
• Strong advisory skills rather than people management.
• Proficiency in developing compliance documentation and best practices.

Responsibilities

• Provide IT compliance guidance and ensure adherence to policies.
• Maintain documentation and best practices for accreditations.
• Develop security awareness and training initiatives.
• Conduct internal compliance assessments.

Skills

IT compliance guidance

Data governance

Documentation procedures

Risk-based compliance

Professional engagement skills

Job description

Job Description

IS Compliance Manager - Law Firm - Northampton - £65k

My prestigious legal client requires a Compliance Manager to join them to manage assigned compliance programs and related activities for the firm.

Core Duties

• Provide IT compliance guidance and recommendations across the firm.
• Provide instructions to ensure compliance with all data governance, security and usage policies.
• Maintain and improve appropriate documentation, procedures and best practices to ensure that the firm retains appropriate accreditations (ISO27001, Cyber Essentials, Cyber essentials+, ISO27002 etc).
• Act as main respondent for client audits.
• Explore control deficiencies associated with IT systems and processes throughout the firm.
• Ensure internal controls and regulatory compliance across IS, following a risk‑based approach that balances efforts with risks for Information Protection.
• Develop and manage security awareness and training initiatives.
• Assist with the ongoing development of the firm's AI Policy.
• Own and manage the BCP process.
• Conduct internal compliance assessments.

This role will very much suit someone who has worked in business professional engagement environments where they've implemented and maintained ISO27001, Cyber Essentials, Cyber essentials+ certification etc.

This is more of an advisory role rather than a people management position.

Good professional engagement skills are therefore required.

Hybrid working - 2‑3 days a week in Northampton - no other travel expectations.

In accordance with the Employment Agencies and Employment Businesses Regulations 2003, this position is advertised based upon DGH Recruitment Limited having first sought approval of its client to find candidates for this position.
DGH Recruitment Limited acts as both an Employment Agency and Employment Business.