Information Security Manager

Norton Blake

Job Opportunity: Information Security Manager – Contract – Hybrid – £90-100k

Job Summary:
As the Information Security Manager reporting to the CIO, you will play a crucial role in managing information security, information governance, policies, and IT compliance at our firm. Working closely with third-party providers, you will ensure the day-to-day IT security operations meet expectations. Collaboration with the CIO to set standards for information security, hardware/software changes, cyber risk analysis, and information security policies is paramount. Your leadership will be pivotal in incident response to any security breaches, coordinating with the IT Team, outsourced service providers, and internal risk and compliance functions.

Main Duties and Responsibilities:

• Line management of the Information Security Analyst
• Oversight of 3rd party service providers for 1st line cyber security incident and response, ensuring service levels and operational standards are met
• Identification and monitoring of environmental and market trends, proactively assessing impacts on business strategies, benefits, and risks
• Provision of authoritative advice and guidance on security control requirements
• Review of information security policy, standards, and guidelines
• Ensure architectural principles are applied during design to reduce risk and drive adoption and adherence to policy, standards, and guidelines
• Maintenance and management of Security Incident Response plans and affected processes
• Oversight of information security initiatives, including client security questions, audit action points, phishing tests, etc.
• Delivery of projects in collaboration with other IT Team members to enhance the firm’s security posture

Personal Attributes:

• Proven experience as an Information Security Manager
• Law firm experience or Legal experience
• Ability to influence and collaborate with colleagues to introduce change
• Excellent communication and presentation skills, conveying technical information to non-technical staff
• Strong interpersonal skills, working closely with people at all levels in the firm
• Independent thinker and team player with a sense of responsibility
• Adaptable to changing requirements and technologies
• High standard of written and oral communication with attention to detail
• Positive and robust attitude with a high level of personal motivation
• Flexible approach to working

Skills:

• Proven track record of delivering security improvements to time, cost, and quality controls
• CISSP or CISSM certification essential
• Thorough understanding of GDPR essential, related qualifications desirable
• ISO 27001 accreditation and experience of implementation advantageous
• In-depth experience with Microsoft Sentinel and Defender essential
• Experience with Secureworks, Mimecast, and other security applications desirable
• Knowledge of professional services and partnership environments advantageous

If you are an information security manager ideally with Legal experience please do get in touch.