IS Compliance Manager

DGH Recruitment Ltd.; Northampton; Hybrid; GBP 55,000 - 65,000; Full time

Job summary

A legal recruitment agency is seeking a Compliance Manager for a prestigious law firm in Northampton. This role involves managing compliance programs, providing IT compliance guidance, and ensuring adherence to standards such as ISO27001 and Cyber Essentials. Ideal candidates will have experience in business environments and possess strong professional engagement skills. The position offers hybrid working conditions with 2-3 days per week in the office.

Qualifications

• Experience implementing and maintaining ISO27001 and Cyber Essentials certifications.
• Good professional engagement skills for advisory roles.

Responsibilities

• Manage compliance programs and activities for the law firm.
• Provide compliance guidance across the organization.
• Develop and manage security awareness initiatives.
• Conduct internal compliance assessments.

Skills

IT compliance guidance

Data governance

ISO27001 experience

Cyber Essentials certification

Security awareness training

Regulatory compliance

Job description

IS Compliance Manager – Law Firm – Northampton – £65k

My prestigious legal client requires a Compliance Manager to join them to manage assigned compliance programs and related activities for the firm.

Core Duties:

• Provide IT compliance guidance and recommendations across the firm.
• Provide instructions to ensure compliance with all data governance, security and usage policies.
• Maintain and improve appropriate documentation, procedures and best practices to ensure that the firm retains appropriate accreditations (ISO27001, Cyber Essentials, Cyber essentials+, ISO27002 etc).
• Act as main respondent for client audits.
• Explore control deficiencies associated with IT systems and processes throughout the firm.
• Ensure internal controls and regulatory compliance across IS, following a risk‑based approach that balances efforts with risks for Information Protection.
• Develop and manage security awareness and training initiatives.
• Assist with the ongoing development of the firm’s AI Policy.
• Own and manage the BCP process.
• Conduct internal compliance assessments.

This role will very much suit someone who has worked in business professional engagement environments where they have implemented and maintained ISO27001, Cyber Essentials, Cyber essentials+ certification etc.

This is more of an advisory role rather than a people management position. Good professional engagement skills are therefore required.

Hybrid working – 2‑3 days a week in Northampton – no other travel expectations.