Information Security Manager

We're recruiting on behalf of a leading legal firm for an Information Security Manager to lead and strengthen their information security function. This is a hands on, strategic role where you'll manage a small team, oversee ISO 27001 and Cyber Essentials Plus compliance, and drive continuous improvement across the business.

• Develop and deliver the firm's information security strategy.
• Lead and mentor a small team of IT security professionals.
• Own ISO 27001 implementation and Cyber Essentials Plus certification.
• Manage operational security: endpoint protection, M365 security, SIEM/SOC, vulnerability management, and incident response.
• Lead security projects and embed "Secure by Design" principles across initiatives.
• Build strong relationships with stakeholders and deliver security awareness training.