At a Glance
- Tasks: Lead the governance of IT security policies and ensure compliance across the organisation.
- Company: Join Lawfront, a rapidly expanding legal group with a modern approach.
- Benefits: Competitive salary, career growth, and a chance to shape security practices.
- Other info: Exciting opportunity to influence security governance in a growing organisation.
- Why this job: Be at the forefront of cyber security in a dynamic legal environment.
- Qualifications: Cybersecurity certifications and strong knowledge of security frameworks required.
The predicted salary is between 60000 - 80000 £ per year.
Cyber Security Risk & Governance Manager
Lawfront is one of the UK’s most ambitious and rapidly expanding Legal Groups.
Through strategic acquisition and the integration of high‑performing regional law firms, we are building a national platform that combines local excellence with the strength, investment, and innovation of a modern Legal organisation.
Our growth trajectory is significant — and accelerating.
As we continue to welcome new firms into the Lawfront family, we are strengthening our central functions to ensure we deliver consistent, scalable, and best‑in‑class support across the Group.
Role Purpose
The Cyber Security Risk & Assurance Lead is responsible for defining, implementing, and governing IT security policies, standards, and compliance frameworks across the organisation.
This role ensures that security controls are embedded into IT architecture and delivery, while maintaining alignment with regulatory requirements and organisational risk appetite.
Operating as part of a central (horizontal) IT Security function, this role works closely with Architecture, Delivery, and Service teams; providing oversight, assurance, and governance rather than hands‑on operational security execution.
This role is governance‑led rather than operational, focusing on defining what “good” looks like and ensuring it is consistently applied.
The Cyber Security Risk & Assurance Lead provides oversight and assurance, while operational security execution remains with IT Security Engineers within the Service Delivery function.
The success of this role depends on effectively embedding security into architecture and delivery without creating unnecessary friction, ensuring a risk‑based, business‑aligned approach to security and compliance.
Key Responsibilities
- Security Policy & Standards
- Governance & Compliance
- Audit & Assurance
- Security Architecture Alignment
- Risk Management
- Stakeholder Engagement
- Vendor & Third‑Party Security
- Continuous Improvement & Awareness
Experience
- Holder of relevant Cyber Security Certifications – e. g. CISM, CCSP or CISSP
- Strong knowledge of security frameworks (e. g., ISO 27001, NIST, CIS Controls)
- Understanding of cloud security principles (Azure, AWS, or GCP)
- Familiarity with the concepts, standards and tools involved in controlling identity and access management, data protection, resilience & loss prevention, and network security
- Experience with risk management and compliance tooling (GRC platforms desirable)
- Experience with selecting, deploying, maintaining and securing IT systems in a mid‑sized (200‑2000 user) UK organisation.
- Familiarity with popular UK law firm applications and services is advantageous.
- Ideally around 7–10 years in IT and security, with strong focus on governance, risk, and compliance
- Experience managing audits and regulatory requirements
- Experience working within enterprise IT environments and architecture governance structures, ideally within a legal environment.
- Experience in regulated industries (preferred)
It’s an exciting time to join our organisation, and this will give you a fantastic opportunity to be a key part of our development.
If this sounds like you then please get in touch by clicking apply below.
#J-18808-Ljbffr
Contact Details:
Lawfront (Lawfront Group Limited) Recruitment Team
