Your newpany
This organisation is a well-known international law firm with over 1000 legal professionals working across Canada, the UK, Europe, the Middle East, Asia and South America. They provide clients with in depth expertise in key global sectors and a suite of legal services at home and abroad. Working in a 50/50 hybrid model from their impressive Birmingham City Centre offices, you can expect an environment where diversity and inclusion is at the centre of what they do, alongside Agile+ working policies.

Your new role
Reporting to the ITpliance Manager, you will be the Subject Matter Expert for Information Security.
The key objectives of the role are to manage, maintain and monitor the Information Security Management System (ISMS) within the firm’s Integrated Management System (IMS). You will embed a culture of information security within the firm, with a focus on security by design alongside acting as an interface for security between the strategic and process-based activities and the work of the technology-focused experts, analysts, and administrators. You will be expected to work with the IT organisation and business management to align security priorities and plans with key business objectives.

What you'll need to succeed
Ideally, you will be educated to degree level or equivalent, with a minimum of 3-5 years of professional experience in a security-based role. Applications from individuals who have ISO 27001 Lead Implementer/Auditor experience as well as any security accreditation such as CISSP, CISA, CISM would be highly advised to apply. You will need a strong understanding of ISO 27001, Cyber Essentials and PCI/DSS accreditation requirements alongside knowledge and experience of working within a NIST framework. This role will require someone with excellent knowledge of: GDPR, Business Continuity and Disaster Recovery Planning, Information Security Policies, Creating Education and Awareness programmes, Security Incident Response and Secure Development Processes (including OWASP). Third Party Supplier Management, Antivirus, Malware, threat hunting techniques and technologies are also highly sought after for this role. If you have experience of conducting security risk assessments and rmendingpensating controls, balancing risk andmercial drivers, this would also be advantageous.

What you'll get in return
You can expect a generous package alongside a full benefits scheme which can be discussed on application alongside 50/50 hybrid working agile+ working environment.