Information Security Manager (12 month fixed-term maternity cover)
Core
Own information security across Legatics, setting vision and strategy, maintaining ISO 27001 certified ISMS, embedding security into client-facing products, and acting as the security point of contact for clients and business teams.
Role type
Senior IC Information Security Manager
Builds
Client-facing legal transaction management platform for law firms and their clients
Domain
LegalTech / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
ISO 27001 ISMS management, security strategy and governance, client security assurance, technical risk assessment, vulnerability management, cloud and identity security, incident response, security monitoring and detection
Preferred skills
Penetration testing and red-team exercises, threat modelling, vendor risk management, AI security governance
Technologies
Google Workspace, Microsoft Entra ID, SentinelOne, Datadog, Prowler, SonarQube, Grype/Syft, DefectDojo, ScubaGoggles, GAMADV-XTD3, DMARC, DKIM, SAML, OAuth
Responsibilities
Own the vision, direction and roadmap for information security; maintain ISO 27001 certification and ISMS; complete client information security questionnaires and respond to security queries; conduct technical risk assessments on product features; audit and harden cloud and identity posture; lead detection, triage, containment and response for security incidents; develop and maintain security monitoring, reporting and tracking tools.
Seniority
Senior, hands-on IC