Quality & Information Security Officer
Birmingham Hybrid working
We're looking for an experienced information security professional to take ownership of the implementation and long-term management of the firm's Information Security Management System (ISMS). This is a high impact role crossing IT, Risk, Operations and Professional Standards, with responsibility for embedding ISO 27001 across the business, driving audit readiness, strengthening governance frameworks, and championing a strong information security culture.
The Role
- Leading ISO 27001 implementation, governance and continuous improvement
- Managing internal and external audit activity
- Owning ISMS documentation, controls and policies
- Driving risk identification, treatment and monitoring
- Supporting wider governance and compliance initiatives
- Acting as the go to SME for ISO 27001 across the organisation
About you
- Strong working knowledge of ISO 27001
- Ideally you have experience in a law firm - must be in professional services
- Experience implementing and maintaining compliant ISMS frameworks
- Excellent stakeholder management skills
- Strong governance, documentation and audit experience
- Ability to work cross functionally within a fast paced environment
What's in it for you?
- Great company wide benefits
- A brilliant opportunity for someone wanting real ownership and visibility
- Opportunity to work in a global business
- Grow with the firm as they continue expanding
- Hybrid and Flexible working