Information Security Manager

**New Permanent Role Information Security Manager (Hybrid) London City**

Location – London City
Salary £80k - £90k & Benefits Package
Industry – Legal 
 
Description

• Extensive experience in risk and information security frameworks
• Demonstrable track record with ISO27001 and SOC2 as a minimum
• Assurance and due-diligence programmes
• Working with auditors and audits
• Articulate with senior stakeholders and engineers
• Current in at least two of these: CISSP, CISA, CISM, CRISC, CIPM, CIPP/E, CIPP/US, ISO27001 LA/LI, TOGAF

Nice to haves

• Strong change management experience
• Team management and mentoring experience
• GDPR and UK DPA 2018 experience
• Experience in regulated industries
• Experience working with a start-up or scale-up environment
• Experience with securing cloud services
• Experience with securing SDLC, CI/CD
• Experience with EDR, XDR, SIEM, DLP
• Experience in the legal industry
• Familiar with collaboration tools such as Slack, Trello, Jira and Confluence 
• Experience with FedRAMP

The job role will include

• At least one direct report
• Full responsibility for information security management system
• Maintaining ISO 27001, SOC 2 Type 2 and Cyber Essentials
• Defining the long-term information security strategy
• Management of risk & asset registers and management of vulnerabilities
• Internal audit programme
• Handling any security questions from prospects or existing customers
• Taking the lead on calls with CIOs & CISOs from large law firms & businesses to discuss our security practices
• Delivering information security training to staff