Strategic Information Security Leader

MJA (London) Ltd; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

MJA (London) Ltd is seeking a seasoned Head of Information Security to shape and mature the organisation's cyber security strategy, ensuring confidentiality, integrity and availability of information, systems and services.

Reporting to the CIO, you will own the information security framework, drive ISO 27001 and Cyber Essentials Plus programs, and lead security operations while managing external partners and a skilled security team.

Qualifications

• Strong information security leadership experience, ideally within legal, professional services or another regulated environment.
• Proven experience owning and improving ISO 27001 and security governance.
• Experience managing outsourced SOC and security partners.
• Strong knowledge of security operations, threat detection, incident response and vulnerability management.
• Good understanding of Microsoft/Azure, cloud security, SaaS assurance and security architecture.

Responsibilities

• Develop and implement the information security strategy and roadmap.
• Own ISO 27001 and Cyber Essentials Plus compliance.
• Lead security operations and manage outsourced SOC partners.
• Oversee incident response, vulnerability management and remediation.
• Work with external security partners and suppliers.
• Lead and mentor the Information Security team and collaborate with IT, Legal, Data and business units.

Skills

Security leadership

ISO 27001

Security governance

SOC management

Incident response

Vulnerability management

Cloud security

Microsoft Azure

Security architecture

Stakeholder management

Job description

MJA (London) Ltd is seeking a seasoned Head of Information Security to shape and mature the organisation's cyber security strategy, ensuring confidentiality, integrity and availability of information, systems and services.

Reporting to the CIO, you will own the information security framework, drive ISO 27001 and Cyber Essentials Plus programs, and lead security operations while managing external partners and a skilled security team.