Russell-Cooke
Cyber Security & Compliance Lead
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
CYBER SECURITY & COMPLIANCE LEAD
Hours
Full-time, 9:30am - 5:30pm with flexibility required to support system changes, upgrades, and critical incidents where necessary.
Department
IT / Risk & Compliance
The Role
The Cyber Security & Compliance Lead is responsible for defining, delivering, and continuously improving the firm’s cyber security, information security, and compliance framework.
The role ensures that the firm’s systems, data, and client information are protected against evolving threats, while maintaining compliance with regulatory, legal, and client-driven security requirements.
Acting as the firm’s senior authority on cyber risk, the role works closely with IT, Risk & Compliance, and senior stakeholders to embed a strong security culture and ensure that security is aligned to business priorities and client expectations.
Essential
Technical skills and expertise
- Significant experience in cyber security, information security, or IT risk roles.
- Experience operating at a senior or lead level within a professional services or regulated environment.
- Strong understanding of security frameworks (e.g. ISO 27001, NIST, Cyber Essentials, GDPR).
- Experience managing cyber risk, audits, and compliance programmes.
- Experience handling security incidents and leading response activities.
- Ability to translate technical risk into clear business language for senior stakeholders.
Desirable
- Experience within a law firm or legal services environment.
- Experience supporting client security audits and due diligence processes.
- Familiarity with SOC services, SIEM tools, and modern security platforms.
- Professional certifications (e.g. CISSP, CISM, ISO 27001 Lead Implementer).
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Responsibilities
Duties include but are not limited to:
- Define and deliver the firm’s cyber security and information security strategy, aligned to business objectives and regulatory requirements.
- Own the firm’s cyber risk framework, including risk identification, assessment, mitigation, and reporting to senior leadership.
- Establish and maintain security policies, standards, and controls, ensuring alignment with frameworks such as ISO 27001, GDPR, and legal sector requirements.
- Lead security governance and compliance activities, including audits, certifications, client security assessments, and regulatory reporting.
- Act as the firm’s senior escalation point for cyber incidents, overseeing response, investigation, and remediation activities.
- Oversee threat detection, vulnerability management, and security monitoring, working with internal teams and external providers (e.g. SOC services).
- Ensure effective identity and access management controls, data protection measures, and secure handling of sensitive client and firm data.
- Work closely with the IT Infrastructure and Development Lead to ensure systems are designed and implemented securely (“secure by design”).
- Work closely with the IT Service Management Lead to ensure security controls are embedded within operational processes and incident management.
- Develop and deliver a firm-wide security awareness and training programme, promoting a strong security culture across all staff.
- Manage relationships with security vendors and partners, ensuring effective delivery of services and alignment with firm requirements.
- Provide clear, business-focused reporting on cyber risk, incidents, and compliance to senior leadership and, where required, clients.
- Support client engagements and audits, ensuring the firm meets client security expectations and due diligence requirements (increasingly critical in legal sector).
- Stay informed of emerging threats, regulatory changes, and industry best practice, ensuring the firm adapts its security posture accordingly.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Salary And Benefits
We offer competitive salaries and generous benefits.
For more information or to apply please follow the link on the portal.
We welcome direct applications. If you would like any further information about the Firm please contact a member of the HR team.
We have a diverse workforce and aim to attract high calibre applicants that reflect the demography of our geographical location and client base. Individuals will be employed solely on merit and the requirement of the position. No applicant or employee receives less favourable treatment on the grounds of sex, race, marital status, disability, age, sexual orientation, gender Identity or religion. Reasonable adjustments will be made to eliminate or reduce disadvantage.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location