IT Security Operations Manager - Law Firm

Job Responsibilities

• Develop and implement information security policies, standards and documentation in collaboration with the Technology Leadership Team, ensuring compliance with all applicable legal or regulatory legislations.
• Manage cross-functional initiatives to deliver on risk goals, policies and procedures.
• Establish and maintain the relationship with our security vendors, including SoC, SiEM and MDR services
• In conjunction with our third-party vendor to research and evaluate emerging security threats and identify and implement appropriate mitigation strategies.
• Manage audit findings (internal, external and client driven) to ensure that business departments understand issues and that remediations effectively mitigate information security risks.
• Manage the cyber incident management process and develop appropriate document repositories, policy documents, operational schedules and processes.
• Drive and support an exceptions and waivers process ensuring exceptions are appropriately reviewed and action taken where relevant.
• Promote the firm's security policy, to ensure appropriate measures are taken to secure the firm's information and minimise security incidents.
• Experience in growing and motivating a team; coaching members through career milestones and progression

Skills Required

• Demonstrate a strong technical background in information security and security platforms
• Apply industry-standard security control frameworks to design, operate, and govern information security systems and processes
• Lead teams and display gravitas when managing key initiatives
• Knowledge of Azure, encryption key management and cloud-based services such as M365 is essential.
• Experience of operating in a similar role within the framework of and adhering to requirements of ISO27001 and Cyber Essentials Plus or similar standards.
• Experience in related supplier management, with vendors and resellers.

This is a hybrid role, offering 2 days WFH/3 days office based.