Monthly salary: Competitive
Full-time, 9:30am – 5.30pm with flexibility required to support system changes, upgrades and critical incidents where necessary.
The Role
The Cyber Security & Compliance Lead is responsible for defining, delivering, and continuously improving the firm’s cyber security, information security, and compliance framework.
The role ensures that the firm’s systems, data, and client information are protected against evolving threats, while maintaining compliance with regulatory, legal, and client-driven security requirements.
Acting as the firm’s senior authority on cyber risk, the role works closely with IT, Risk & Compliance, and senior stakeholders to embed a strong security culture and ensure that security is aligned to business priorities and client expectations.
Technical skills and expertise
Essential
- Significant experience in cyber security, information security, or IT risk roles.
- Experience operating at a senior or lead level within a professional services or regulated environment.
- Strong understanding of security frameworks (e.g. ISO 27001, NIST, Cyber Essentials, GDPR).
- Experience managing cyber risk, audits, and compliance programmes.
- Experience handling security incidents and leading response activities.
- Ability to translate technical risk into clear business language for senior stakeholders.
Desirable
- Experience within a law firm or legal services environment.
- Experience supporting client security audits and due diligence processes.
- Familiarity with SOC services, SIEM tools, and modern security platforms.
- Professional certifications (e.g. CISSP, CISM, ISO 27001 Lead Implementer).
Key Responsibilities
Duties include but are not limited to:
- Define and deliver the firm’s cyber security and information security strategy, aligned to business objectives and regulatory requirements.
- Own the firm’s cyber risk framework, including risk identification, assessment, mitigation, and reporting to senior leadership.
- Establish and maintain security policies, standards, and controls, ensuring alignment with frameworks such as ISO 27001, GDPR, and legal sector requirements.
- Lead security governance and compliance activities, including audits, certifications, client security assessments, and regulatory reporting.
- Act as the firm’s senior escalation point for cyber incidents, overseeing response, investigation, and remediation activities.
- Oversee threat detection, vulnerability management, and security monitoring, working with internal teams and external providers (e.g. SOC services).
- Ensure effective identity and access management controls, data protection measures, and secure handling of sensitive client and firm data.
- Work closely with the IT Infrastructure and Development Lead to ensure systems are designed and implemented securely (“secure by design”).
- Work closely with the IT Service Management Lead to ensure security controls are embedded within operational processes and incident management.
- Develop and deliver a firm-wide security awareness and training programme, promoting a strong security culture across all staff.
- Manage relationships with security vendors and partners, ensuring effective delivery of services and alignment with firm requirements.
- Provide clear, business-focused reporting on cyber risk, incidents, and compliance to senior leadership and, where required, clients.
- Support client engagements and audits, ensuring the firm meets client security expectations and due diligence requirements (increasingly critical in legal sector).
- Stay informed of emerging threats, regulatory changes, and industry best practice, ensuring the firm adapts its security posture accordingly.
Salary and benefits
We offer competitive salaries and generous benefits.
For more information or to apply please follow the link on the portal.
We welcome direct applications. If you would like any further information about the Firm please contact a member of the HR team.
We have a diverse workforce and aim to attract high calibre applicants that reflect the demography of our geographical location and client base. Individuals will be employed solely on merit and the requirement of the position. No applicant or employee receives less favourable treatment on the grounds of sex, race, marital status, disability, age, sexual orientation, gender Identity or religion. Reasonable adjustments will be made to eliminate or reduce disadvantage.
