Skip to main content
AfterDuty

Data Risk Officer (Information Security)

Kennedys · Manchester, Greater Manchester

Type
Full-time
Posted
8 days ago

Overview

Your incident command and threat assessment skills from policing support cyber resilience and incident management tasks.

About this role

Kennedys is looking for a Data Risk Officer (Information Security) to join the Risk & Compliance team, supporting the Global Information Security Manager in running the Information Security Management System (ISMS), ISO 27001 compliance, cloud security governance, and cyber resilience activities.

Team

Kennedys Risk & Compliance team handles a wide range of partnership and risk and compliance issues for the firm and acts as an in-house legal department assisting with regulatory and professional conduct enquiries. Within this the Data Risk Team specialises in risk to data, privacy and information as well as compliance with associated regulations and best practise globally. This includes keeping abreast of new and emerging risks associated with ever developing technology such as AI.

Key Responsibilities

  • Support ISMS and ISO27001 control framework
  • Assist with security risk assessments and audits
  • Work with IT to define support cloud security and technology risk reviews
  • Assist in cyber resilience and incident management
  • Support monitoring, threat analysis, and vulnerability tracking
  • Contribute to governance, reporting and training

Required Experience

  • Knowledge of ISO27001/ISMS or other recognized security frameworks
  • Understanding of cloud security principles
  • Awareness of cyber security and resilience concepts
  • Strong analytical and organisational skills
  • Communication skills across technical and business teams

Please let us know if you require any additional support or adjustments to be made in order to submit your application to Kennedys.

*where a level of experience is indicated, this is a guideline only and represents the amount of time we would usually expect a candidate to accumulate the requisite level of experience. This does not preclude applications from candidates with more or less experience.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.

See all cyber security & digital forensics jobs in Manchester

Why this fits a police background

  • Incident command & response
  • Risk & threat assessment
  • Working to legislation & regulation

What cyber security & digital forensics roles pay ex-police

Advertised UK ranges, editorial estimates reviewed July 2026

Digital forensics analyst£32,000–£45,000
DFIR consultant£45,000–£65,000
Senior forensics / IR specialist£60,000–£80,000
Threat-intelligence specialist£55,000–£80,000
Full cyber security & digital forensics salary guide →

More cyber security & digital forensics jobs for ex-police

  • Incident Response Analyst

    AXA UK · Manchester

    Full-time

    Your incident command experience and evidence handling skills transfer directly to cyber incident response and digital forensics.

    Posted 7 days ago

  • Full-time

    Your risk assessment and compliance experience from policing transfers directly to governance and risk management.

    Posted 10 days ago

  • Cyber Incident Responder

    CYFOR · Manchester

    Full-time

    £40,000 – £50,000Estimated

    Your experience investigating digital evidence and managing incidents in policing gives you a strong foundation for this role, particularly in forensic acquisition, log analysis, and producing evidential reports. The requirement for clear client communication and structured investigation aligns with your interview and case-file skills, though you would need to build specific technical knowledge of cloud environments and EDR tools.

    Posted 16 days ago

  • Full-time

    Your experience managing operational risk and leading incident reviews translates directly into shaping security culture and resilience.

    Posted 2 days ago