Information Security Manager

This is a Permanent, Full Time vacancy that will close in 18 days at 23:59 GMT.

We are looking for an Information Security Manager to join our Risk and Compliance team to be located from either our Newcastle or Leeds office. The successful candidate will be expected to work with the wider firm to deliver a commercial, pragmatic, effective and risk-based approach to activities that provide appropriate access to, and protect the confidentiality, availability and integrity of client, employee, and corporate information.

In addition, you will work with the firm's IT team on an ongoing basis by providing advice and consultancy regarding the information security implications of any software and hardware implementations, changes and upgrades. There will also be some involvement in advising and drafting of information security policies, monitoring compliance, providing assistance in relation to the assessment of cyber security risks, mitigation initiatives and assisting with the firm’s cyber security and information security incident response plans.

What will I be doing?

The successful candidate will be responsible for managing the firm’s ISO27001, Cyber Essentials, GDPR compliance programmes and managing an ongoing information security risk assessment programme, as well as initiating and managing information governance initiatives. The role will play a key part in supporting the firm's information security and compliance objectives including, but not limited to:

• Data breaches
• Security controls
• Governance and regulatory compliance
• Manage ISO 27001
• Assist with cyber security from an info sec angle
• Support GDPR compliance
• Investigate personal data breaches

You’ll have:

• Strong leadership in driving security initiatives within a firmwide context.
• In-depth knowledge of data protection legislation (Data Protection Act 2018, UK and EU GDPR).
• Proven experience in a similar role, preferably within a law firm or professional services environment.
• Expertise in information and cyber security controls, particularly ISO27001 and Cyber Essentials Plus, and comprehension of technical IT concepts.
• Robust understanding of technical and organisational security controls, with a keen ability to evaluate and mitigate risks.
• Industry certifications such as CISSP or CISM are highly desirable.
• Exceptional communication skills, with the ability to convey technical issues clearly to diverse audiences.
• Strong relationship-building skills.
• Excellent problem-solving and decision-making skills.
• Proven ability to work both as part of a team and individually with a flexible "can-do" attitude.

Desirable skills and attributes:

• Preferably CISM Certified (Certificate in Information Security Management)

About us:

We're proud to be an independent, full-service law firm providing exceptional legal expertise to businesses, the built environment, healthcare, the public and third sectors, and private individuals. With several office locations around the UK we're one of the UK's Top 100 law firms. When you join us you’ll be part of a team of over 500 passionate and talented individuals who take pride in offering an exciting and supportive environment allowing you to thrive. We're passionate about promoting wellbeing and equality, diversity and inclusion, with dedicated committees to support ongoing efforts. We recognise that a healthy and thriving Firm filled with individuality and differences strengthens our teams, our clients and our communities.

What we can offer you:

We’re committed to being a firm focused on support, development, wellbeing and inclusion and we’re always striving to improve. Our commitment to this has been recognised by our achievement of our Gold Investors in People award and by our Hive HR Employee Voice certification. We reward our people with a whole range of benefits, some core and some flexible, designed to shape a reward package that’s right for you – now and in the future. Our core benefits include:

• An enhanced pension scheme with employer matched contributions of up to 6%.
• 25 days' annual leave + bank holidays (increasing to 28 days with length of service). There is also the option to purchase up to 5 additional days.
• Life assurance cover of 4 times basic salary, with the option to purchase additional cover.
• A range of health and wellbeing benefits.
• Hybrid working with a minimum requirement of 2 days per week working from one of our offices.
• We also have a flexible benefits programme where you can purchase a wide range of additional benefits.

If you would like to request further information or to discuss the role, please contact quoting vacancy reference NTX1247087. If you require any adjustments to be made to our recruitment process, please request a call back via the above email address. Agencies - please note that we are not currently instructing agents to support with this role. Please do not send speculative CVs.

The Company:

Ward Hadaway is a full-service, UK Top 100 law firm providing exceptional legal expertise to businesses, public and third sectors, and individuals. From our offices in Birmingham, Leeds, Manchester, Newcastle and Teesside, we combine regional strength with national influence to deliver high-quality, tailored solutions that drive success for our clients. We remove ambiguity and provide a clear direction and certainty. We build trust with each other and our clients through honest, transparent interactions. Respectful We succeed together. We build and maintain an inclusive firm in which difference is recognised, valued and harnessed. Ambitious We constantly strive and innovate to be the best we can be for ourselves, our teams and the firm.