Lead Cyber Security Specialist in London

The Department

We are dedicated to safeguarding the data, systems, and assets of our law firm and wider group against evolving cyber threats. As our Lead Cyber Security Engineer, you will play a pivotal role in shaping and strengthening our security posture across all group entities.

The Role

• Partner with stakeholders to identify risks and implement effective security controls.
• Lead and deliver cyber security initiatives that enhance protection across the group.
• Take ownership of projects, working with autonomy and accountability to drive measurable improvements.
• Apply your expertise with Microsoft security tools including Intune, Azure, and Windows alongside other leading technologies.
• Ensure the confidentiality, integrity, and availability of sensitive data across all group entities.

This is an exciting opportunity to combine technical expertise with strategic influence, helping us build resilience and maintain trust in a fast‐moving threat landscape.

Key Deliverables

• Strengthen our security posture by implementing advanced cyber security measures that measurably reduce enterprise risk across all group entities.
• As a subject matter expert, you will set priorities, lead initiatives, and deliver solutions that keep our firm's and group's data and assets secure.
• Streamline and standardise security operations by addressing technical debt, defining clear standards, and improving documentation across the group.
• You will simplify processes, enhance efficiency, and embed best practice so our teams can remain focused on delivering exceptional service to our clients.

Responsibilities

• Designing and implementing cybersecurity policies, standards, and procedures that align with industry best practice and legal/regulatory requirements across all group entities.
• Driving continuous improvement by identifying risks, reducing technical debt, and ensuring security is embedded across systems and processes.
• Staying ahead of emerging threats, tools, and techniques to ensure the group remains resilient.
• Leading security assessments, audits, and penetration tests, ensuring risks are identified, prioritised, and remediated.
• Partnering with the Incident Response team to develop, test, and execute response plans that minimise business impact.
• Working with IT teams to integrate security into infrastructure, applications, and operations.
• Consulting with internal stakeholders and occasionally clients to translate technical requirements into clear business outcomes.
• Building strong partnerships with third‐party vendors to enhance the group's defences.
• Engaging business stakeholders to identify opportunities for improvement and championing initiatives that support strategic goals.
• Mentoring and guiding cybersecurity and IT professionals to strengthen skills, knowledge, and capability within the team.
• Acting as a trusted advisor and role model, promoting a culture of accountability and excellence in cybersecurity.

Skills / Experience

• Minimum 5 years in cybersecurity or a related technology field, with a proven track record of delivering security improvements.
• Strong knowledge of Microsoft 365 security tools, including Intune, Azure AD, and Conditional Access; ability to quickly master new tools and environments.
• Familiarity with legal, regulatory, and industry requirements related to cybersecurity.
• Ability to think creatively and strategically to identify, assess, and mitigate cyber risks.
• Demonstrated experience in developing and implementing security standards, policies, and technical controls.
• Excellent communication skills with the ability to build trusted relationships with stakeholders at all levels, both internal and external.
• Strong organisational skills with the ability to manage multiple priorities, work autonomously, and deliver results under pressure.
• Forward‐thinking, adaptable, and committed to continuous learning and professional development.

We invite you to contribute to our cyber security efforts. Please note that this job profile is not an exhaustive list of duties but merely an outline of the key components of the role. You may be required by your line manager to take on additional responsibilities when requested.