Information Security Officer

Information Security Officer

Location:

City Of London, England, United Kingdom.

Type:
Permanent, Hybrid Working, Competitive Salary.

We are seeking an experienced Information Security Officer to lead our global information and data security programme. The role will shape the firm’s long‑term security strategy, drive ISO 27001 certification, and ensure the resilience of systems and data across offices in the UK, US, and Europe. The position reports to the Director of IT and works closely with regional IT teams and external partners.

• Lead the firm’s information security governance framework across all offices and platforms.
• Maintain and enhance the ISO 27001‑aligned Information Security Management System (ISMS).
• Ensure compliance with frameworks including CIS Controls, NIST, ISO 27701, and GDPR.
• Oversee incident response, threat detection, and access governance across systems such as iManage, Intapp, Aderant, Microsoft 365, and Azure.
• Drive firm‑wide security awareness and training initiatives.
• Monitor regulatory changes and emerging threats, and advise on best practices.

• Strong knowledge of ISO 27001 implementation and certification.
• Experience in a professional services or legal environment.
• Familiarity with Microsoft 365 Defender, Sentinel One, Purview, and Azure security tools.
• Skilled in managing access controls and security operations across enterprise platforms.
• Excellent communication and stakeholder engagement skills.

• Certifications such as CISM, CISSP, or ISO 27001 Lead Implementer/Auditor.
• Experience working with MDR/XDR partners and tools like Trustwave, Mimecast, or Forti Gate.
• Background in mentoring and promoting a security‑conscious culture.

This London‑based role offers hybrid working arrangements and a collaborative, forward‑thinking environment. If you are looking to make a strategic impact in a global legal setting, we would be pleased to share further details.

Due to the high volume of applications, we may not respond to all enquiries. If you have not received a response within 72 hours, please assume that you have not been shortlisted at this stage. Thank you for your interest.