Chief Information Security Officer in Birmingham

Join us to lead and influence the firm's cyber security and information security programme, ensuring best practice is embedded at every level.

The role

Reporting to the Chief Technology Officer, this is a fantastic opportunity to shape and drive the firm's information and cyber security strategy. Acting as a trusted advisor to stakeholders across the business, you will promote a strong security‑first culture, embed best practices, and play a key role in protecting the firm's information assets. You will lead the ongoing development and management of the firm's Information Security Management System (ISMS), maintain ISO 27001 and Cyber Essentials Plus accreditation, and oversee security policies, controls, audits, testing, and compliance activities. Working closely with the IT team, you will identify emerging cyber threats, strengthen security awareness across the firm, and ensure robust, effective security practices are embedded throughout the organisation.

The person

• Degree‑level education (or equivalent experience) and a professional cyber/information security qualification, or a commitment to achieving one.
• Significant experience in cyber or information security, with strong knowledge of ISO 27001, risk management, and audit principles.
• Excellent communication and stakeholder‑management skills, with the ability to engage senior leaders, lead forums, and present board‑level reports. Strong attention to detail, analytical thinking, and a logical, systematic approach to solving complex security challenges.
• Proactive and collaborative style, with the ability to explain technical concepts clearly, build relationships, and drive engagement across the business.
• Committed to continuous professional development, with the flexibility to travel between offices and respond to the evolving demands of the role.

The activities

• Lead and deliver information and cyber security awareness, training, and education initiatives across the firm.
• Support client audits, supplier assurance questionnaires, and tender responses by providing information security expertise.
• Manage the response to cyber security incidents, leading investigations, corrective actions, and lessons learned.
• Develop and maintain the firm's internal information security audit programme, ensuring actions are effectively implemented.
• Oversee and continually improve the firm's Information Security Management System (ISMS) and ISO 27001 compliance.
• Lead security risk assessments, maintain the risk register, and ensure emerging risks are effectively managed.
• Develop, implement, and monitor information security policies, procedures, and controls in collaboration with key stakeholders.
• Work closely with IT, Risk & Compliance, and the Data Protection Officer to strengthen the firm's security and compliance framework.
• Prepare for external audits, manage certification requirements, and report on security performance, risks, and compliance.
• Drive organisation‑wide adherence to information security best practices and support the ongoing development of the firm's security capabilities.

The benefits

As you'd expect, we offer a competitive salary and a wide range of benefits.

Pre‑employment screening

If we offer you a role, we will conduct comprehensive pre‑employment screening, including a basic DBS, verification of your right to work, three year employment history, and a self‑declaration to assess your character and suitability for the role.