City of London (3 days per week in the office)
The role will be responsible for the operational delivery of my clients cyber security function, ensuring that security monitoring, detection, response, engineering and operational security controls effectively protect the Firm from cyber threats.
The role leads day-to-day cyber security operations, develops and maintains security technologies, manages cyber incidents and drives continuous improvement of security monitoring and response capabilities, and ensure that change programmes incorporate security requirements and deliver security by design.
The role provides technical leadership across security operations and works closely with Infrastructure, Business Systems, Service Delivery, Risk & Compliance and third-party security providers to ensure threats are identified, investigated and managed effectively.
Responsibilities:
Security Operations
- Manage the day-to-day operation of the cyber security capability.
- Lead the Cyber Security team, including coaching, mentoring and performance management.
- Oversee threat monitoring, detection, investigation and response activities.
Security Engineering
- Own and maintain cyber security technologies, ensuring they remain effective, supported and appropriately configured.
- Develop, tune and optimise security controls across the technology estate.
- Lead implementation of new security technologies and enhancements.
- Review security architecture and technical designs to ensure alignment with security standards.
Vulnerability Management
- Manage the vulnerability management programme.
- Lead cyber security incident management and response activities.
- Coordinate technical investigations and containment activities.
Security Awareness Training
- Support cyber security awareness initiatives.
Required Skills / Experience:
- Strong technical knowledge of Microsoft Azure, Entra ID, SIEM, Email Security, EDR, SASE, IPS/IDS and Vulnerability management
- Strong people management and leadership capabilities.
- Ability to coach and develop cyber security professionals.
- Ability to communicate technical cyber risks to non-technical stakeholders.
- Experience of working within a global law firm.
- Experience building or transforming security operations functions.
- Experience with managed SOC services.
- Experience with security orchestration and automation technologies.
#J-18808-Ljbffr…