At a Glance
- Tasks: Lead a team to enhance information security and privacy in the financial sector.
- Company: Join a reputable Government body focused on compliance and security.
- Benefits: Enjoy a competitive benefits package and hybrid working model.
- Other info: Opportunity to engage with senior stakeholders and drive strategic initiatives.
- Why this job: Make a significant impact on information security standards and practices.
- Qualifications: Proven experience in information security management and ISO 27001 audits.
The predicted salary is between 75600 - 92400 £ per year.
Morgan Law is working with an arm's-length Government body in the UK financial sector who are seeking a Head of Information Security and Privacy to join their compliance function and manage a 5 person Information Security and Governance function.
You will be responsible for the implementation and management of the Information management system, including third-party risk, ensuring its effectiveness is regularly assessed through external and internal audits.
You will ensure that the organisation is fully compliant with the required Information Security Standards including ISO 27001, Cyber Essentials, Cyber Essentials Plus, NIST and Gov Assure.
This includes the responsibility for all of the control documentation and audit process to ensure full compliance is recognised.
The role is hybrid, 2-3 days a week in their office in South London and comes with a very competitive benefits package.
Responsibilities
- Responsible for the development and management of information and cyber security frameworks and overseeing the management of the Information and Records Management.
- Develop and promote policies to ensure compliance with regulations, standards and good practice relating to information security management.
- Responsible for research and awareness of emerging security risks, ensuring solutions, services, policies, procedures and information security education programme are updated in reasonable timeframes to mitigate against new risks.
- Responsible for making sure that the organisation is compliant with Information Security Standards (e. g.
ISO 27001), ensuring all governance and audit requirements are undertaken.
- Ensure that the organisation is appropriately protected in line with business needs against information and cyber risks including third-party and suppliers.
Experience Required
- Information Security Manager or equivalent with relevant industry experience.
- Experience of managing and overseeing ISO 27001 audits, Cyber Essentials and Cyber Essentials Plus.
- Develop and lead information and cyber security strategies, roadmaps and maturity plans.
- Provide technical security guidance and assurance to technical and non-technical stakeholders.
- Design and deliver security awareness programmes that improve understanding and influence behaviour.
- Support business continuity and resilience planning, testing and lessons learned.
- Engage senior stakeholders and committees through clear reporting, influence and constructive challenge.
Head of Information Security and Privacy in London employer: Morgan Law Careers
As a leading Charity, we pride ourselves on fostering a supportive and collaborative work environment that prioritises employee well-being and professional growth. Our Central London location offers a vibrant atmosphere, with hybrid working options that promote work-life balance, while our commitment to meaningful projects ensures that your contributions have a direct impact on the community. Join us to be part of a dedicated team where your expertise in technology services will help drive innovation and service improvement.
StudySmarter Expert Advice🤫
We think this is how you could land Head of Information Security and Privacy in London
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Morgan Law Careers, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Morgan Law Careers
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Morgan Law Careers. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Head of Information Security and Privacy in London
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Morgan Law Careers insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Morgan Law Careers that you’re committed to staying ahead in the game.
How to prepare for a job interview at Morgan Law Careers
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Morgan Law Careers to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Morgan Law Careers.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
