Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)

Are you an experienced information security leader looking to make a real impact? We're seeking a Chief Information Security Officer (CISO) to take ownership of our information security strategy, regulatory compliance, and cyber resilience framework. As CISO, you will play a pivotal role in protecting sensitive client data, legal case information, and financial records while ensuring compliance with GDPR, SRA requirements, and broader regulatory obligations. This is a strategic leadership position offering the opportunity to shape and mature our security posture across the organisation.

About the Role

Working closely with the Chief Technology Officer and senior leadership team, you will develop and implement a comprehensive security strategy that protects the business from evolving cyber threats while maintaining regulatory compliance and client trust. You will act as the organisation's subject matter expert for information security, data protection, risk management, and incident response.

What You Will Do?

Develop and own the organisation's information security strategy, roadmap, and risk management framework.

Working with our MSSP, lead the response to security incidents, coordinating investigations, remediation activities, and stakeholder communications.

Working with our Group Legal and colleagues, implement effective risk and compliance governance to ensure GDPR and data protection compliance, including DPIAs, data processing agreements, and data subject requests.

Ensure compliance with Solicitors Regulation Authority (SRA) requirements and relevant information security standards.

Manage third-party security assessments and vendor risk reviews, including technology, finance, and AI solution providers.

Establish and maintain security controls covering data classification, access management, encryption, monitoring, and logging.

Drive a culture of security awareness through training, education, and incident response exercises.

Manage relationships with external Managed Security Service Providers (MSSPs) to ensure effective service delivery and governance.

Provide clear, business-focused reporting on security risks to executive leadership and regulators where required.

Who You Are

Significant experience in information security, including leadership experience at CISO, Head of Security, or equivalent level.

Strong knowledge of GDPR, UK GDPR, the Data Protection Act 2018, and wider UK regulatory requirements.

Experience operating within highly regulated environments.

Proven experience in cyber incident response, breach management, and digital forensics.

Strong understanding of the latest information security technologies and best practice deployment, particularly within Microsoft Azure environments.

Excellent communication and stakeholder management skills with the ability to translate technical risks into business language.

Experience developing security strategies, policies, and governance frameworks.

What's In It For You?

High levels of flexibility and a great work life balance

A well-rounded remuneration package (which includes private medical insurance, income protection insurance and discounted gym membership, amongst many other benefits)

Opportunities for growth and progression including professional funding

In person and remote social events

Opportunity to get involved in a range of Environmental, Social and Governance (ESG) activities

We are dedicated to building a diverse, inclusive and authentic workplace, which aligns closely to our cultural principles (Determined, Clear, Creative and Supportive). If you are excited about this role and being part of our culture, but your past experience does not align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles!

About DAC Beachcroft

We are a leading international legal business with over 3,000 colleagues and a diverse range of capabilities. We are market leaders in insurance, health and real estate but with a full-service offering, including growing Financial Services and Tech capabilities. We represent a wide range of clients – from household names to government departments and NHS bodies. We act for nearly all of the top-20 UK and global insurers, we're market leaders in the provision of strategic, commercial and regulatory advice to providers and commissioners in the health sector, and in real estate we advise all of the UK's top-five housebuilders. We are a fast-growing international business with offices around the globe. In addition to our 11 UK offices, we also have offices in Bogota, Buenos Aires, Dublin, Lima, Los Angeles, Hong Kong, Madrid, Mexico City, Milan, New York, Paris, Rome, Santiago de Chile, and Singapore plus a representative office in Miami and broad network of affiliations across the globe. At DAC Beachcroft we are committed to and recognise the importance of equity, diversity and inclusion across the board, including and beyond the protected characteristics. We take decisions based solely on merit. We value, welcome and seek out people with different backgrounds and life experiences, perspectives, beliefs, ways of thinking and identities. We are happy to talk flexible working with our Flex Forward scheme. We would encourage you to talk to us about our approach to flexible working during the hiring process if you would like to explore this further.

Our Hiring Process

Stage 1: Qualification Call

Stage 2: Interview with Hiring Manager

Stage 3: Final Interview

Stage 4: Hired

Not quite right? Register your interest to be notified of any roles that come along that meet your criteria.

Register Your Interest