IT Security & Risk Manager

Solicitors Regulation Authority; West Midlands; Hybrid; GBP 63,000 - 74,000; Full time

Job summary

Solicitors Regulation Authority in the United Kingdom is seeking an IT Security and Risk Manager to lead the IT Risk and Security team and set strategic direction for all IT security activities. You will report to the Director of IT and act as the security SME across the organisation, driving cyber security strategy, risk management, and incident response.

The role is hybrid, based in Birmingham 1–2 days per week with home working the rest; salary range £62,970.13–£74,082.51, dependent on

Qualifications

• Security certifications: CISSP, CISM, ISO 27001 familiarity.
• Experience as a lead IT security advisor.
• Understanding of risk management and threat analysis.

Responsibilities

• Develop technical security policies and governance documentation across the organisation.
• Maintain security processes and ensure compliance collaborating with Risk and Compliance teams.
• Deliver and evolve security technology road map (e.g., SIEM, DLP, IPS/IDS).
• Evaluate new technologies and provide project guidance.
• Manage security compliance and evidence to stakeholders.

Skills

Lead security advisor

Security strategy

Threat analysis

Incident response

Leadership

Education

CISSP or CISM certification

ISO 27001 / Cobit 5 / ITIL knowledge

Job description

Are you an experienced IT security professional who enjoys safeguarding systems and managing a team to drive continuous improvement?

We are looking for an IT Security and Risk Manager to manage our IT Risk and Security team and provide strategic direction for all IT security activities across the SRA.

The Role

Reporting directly to the Director of IT, you will act as the organisation's security subject matter expert, playing a critical role in driving cyber security strategy, strengthening risk management practices, and protecting business operations.

Key responsibilities include

• Develop the technical security policies, maintain and review process and documentation in keeping with legislative, regulatory and company policy requirements and communicate content to stakeholders.
• Ensure that technical security processes and procedures are maintained in keeping with compliance requirements, collaborating with the Risk and Compliance team on such matters.
• Support the delivery of the technical security road map for the business, including technical aspects such as anti-malware, Data Loss Prevention (DLP), Security Event and Incident management (SIEM) and intrusion Prevention / Detection Systems (IPS/IDS) and implement appropriate technical controls.
• Assist in the evaluation of new technologies providing advice and guidance to project teams.
• Maintain and evolve security tools and technologies ensuring they meet business and regulatory demands.
• Evaluate products and third-party security cloud-based security capabilities in keeping with internal processes.
• Manage technical security compliance with company policy, educating stakeholders and working with them to achieve and evidence technical security compliance.
• Contribute to the Technical Design Authority and Business Continuity Groups to provide guidance and assurance in specific project design and implementation activities.
• Conduct or help co-ordinate technical vulnerability assessments (including regular penetration testing) of IT systems and processes, identifying potential vulnerabilities, makes recommendations for risk mitigation.
• Manage and respond rapidly and effectively to security incidents, including the appropriate and sensitive handling of affected staff in conjunction with the CSOC.
• Conduct security assessments to identify threats vulnerabilities, and gaps in supplier ecosystems
• Undertake audit and assurance work on key technical systems to monitor compliance and identify trend.

What is it in for you

• Shape strategic security and risk decisions that make a real organisational impact.
• Work closely with senior leaders and broaden your leadership experience.
• Deepen your expertise across cyber security, risk, governance, and compliance.
• Build the visibility and influence needed to accelerate your career into senior leadership
• Enjoy greater flexibility with an additional 3% of salary after probation to personalise your benefits package.
• Build your future with confidence through our pension scheme, with employer contributions of up to 12.25% if you contribute 7%.

What we are looking for

• Ability to build excellent relationships at all levels including external suppliers and stakeholders
• Hold or working towards a security certification i.e. CISSP, CISM and knowledge of ISO:27001 / Cobit 5, ITIL or IT Best Practice Framework
• Experience of working as a lead IT security advisor (or equivalent)
• In-depth understanding of security principles, methodologies and frameworks i.e. ISO:27001, Cyber Essentials,
• Strong Working knowledge of IT risk and threat analysis/mitigation to industry standards
• A good knowledge of the IT security marketplace, products, capabilities and an understanding of the relationship between a variety of common security solutions

Useful and additional information

There is a full role profile attached to the bottom of this advert on our website.

This is a hybrid role and will be based in our Birmingham office 1 to 2 days a week, and from home the rest of the week

Salary range for this Birmingham based role is £62,970.13 - £74,082.51 and an offer will be dependent on demonstrable knowledge, skills and experience the successful candidate can bring to the role.

If you have any questions that aren't in this advert or on our website, please contact us via: .

Closing date from applications is 30 October 2026 at 09:00.