Our client are seeking an Information Security Manager to join their team.

The Information Security and Risk Team is essential to our business, ensuring our operations are secure, efficient, and resilient against evolving threats.

This role demands a strong focus on Azure and Microsoft security platforms, ISO27001 governance, control monitoring, and the management of a robust information security program.

Key Responsibilities

Azure and Microsoft 365 Security Management

• Enhance the firm's cloud security posture by leveraging a solid foundation in Azure security fundamentals and controls, coupled with practical experience in the Microsoft 365 Defender platform. Although Azure certifications are an asset, paramount importance is placed on strong practical understanding and hands-on experience
• Serve as the Azure security expert, providing support to IT teams regarding Azure service development and infrastructure changes
• Oversee the implementation and management of the information security program, including but not limited to, Azure and Microsoft security solutions
• Conduct regular security assessments and audits to ensure compliance with ISO27001 standards
• Develop and maintain the firm’s information security policies and procedures in line with industry best practices and regulatory requirements across all jurisdictions in which the firm operates
• Support the firm’s response to information security incidents, including investigation, documentation, and coordination with relevant stakeholders
• Support the firm’s efforts to achieve and maintain ISO27001 certification, including governance, control monitoring, and continuous improvement of the ISMS (Information Security Management System)

Skills, Knowledge and Expertise

• Degree in Computer Science, Information Technology, Cybersecurity, or a related field would be beneficial but not essential
• Professional certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or equivalent
• Proven experience in information security management, particularly in a professional services or legal firm environment
• Expertise in Azure and Microsoft security solutions, with a strong understanding of cloud security best practices
• Demonstrable experience with ISO27001 governance, control monitoring, and managing an ISMS
• Strong knowledge of information security principles, frameworks, and standards

For more information, please contact Ben on 707811 or email your CV to jobs@excel-recruitment.com