Lead Information Security Engineer

Stott and May; City Of London; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

An international law firm in London is seeking a Lead Information Security Engineer to enhance security across cloud and on-premise environments. You will design secure frameworks, manage risks, and lead compliance efforts. Ideal candidates have over 5 years’ experience in Information Security and strong technical knowledge in cloud and networking. The role offers a hybrid working model with domestic and international travel opportunities.

Qualifications

• 5+ years’ experience in Information Security.
• Strong technical knowledge of networking, authentication, and cloud (Azure/O365).
• Experience with DLP, incident response, and ISO 27002 standards.

Responsibilities

• Design and maintain secure authentication and authorization frameworks.
• Manage security risks, incidents, and DLP processes.
• Implement and enhance cloud security (Azure, Microsoft 365, iManage).
• Lead incident response, risk assessments, and compliance reviews.
• Collaborate globally to embed security best practices.
• Support policy development, security awareness, and business continuity.

Skills

Information Security

Networking

Authentication

Cloud (Azure/O365)

Data Loss Prevention (DLP)

Incident Response

ISO 27002 standards

Education

CISSP or CEH certification

Tools

Microsoft Defender

CrowdStrike

CyberArk

Rapid7

Palo Alto

Job description

Lead Information Security Engineer
Location: London (Hybrid – 3 days office / 2 days remote)
Type: Permanent

An international law firm is seeking a Lead Information Security Engineer to join its global IT function in London. You’ll play a key role in developing secure architectures, managing risk, and driving security strategy across cloud and on-premise environments.

Key Responsibilities

• Design and maintain secure authentication and authorization frameworks.
• Manage security risks, incidents, and DLP (Data Loss Prevention) processes.
• Implement and enhance cloud security (Azure, Microsoft 365, iManage).
• Lead incident response, risk assessments, and compliance reviews.
• Collaborate globally to embed security best practices.
• Support policy development, security awareness, and business continuity.

Skills & Experience

• 5+ years’ experience in Information Security.
• Strong technical knowledge of networking, authentication, and cloud (Azure/O365).
• Experience with DLP, incident response, and ISO 27002 standards.
• Familiarity with tools such as Microsoft Defender, CrowdStrike, CyberArk, Rapid7, or Palo Alto.
• CISSP or CEH certification preferred.
• Excellent communication, problem-solving, and stakeholder management skills.

Additional Details

• Standard hours: 9:00am–5:00pm with on-call participation.
• Hybrid working (3 office / 2 remote).
• Up to 20% domestic/international travel.

If you are interested please email your CV to [e-mail] for immediate consideration