About this role
Hours: 9.30am – 5.30pm, Monday to Friday
*Hybrid working:*40% - 60% time spent in office
Department: Information & Communication Technology
Flexible applications considered
Kingsley Napley is seeking a Head of Information Security to lead and develop the firms cyber security capabilities ensuring the confidentiality, integrity and availability of the firm’s information systems, data and services. .
Reporting into the Chief Information Officer you will maintain ownership of the firm’s ISO27001 Information Security Management System and Cyber Essentials Plus certification plus the wider security policies and standards.
What you’ll do
- Develop and deliver the firm's cyber security strategy in line with the firm’s goals and risk appetite.
- Lead and continuously improve the firm's cyber security capability, roadmap and maturity.
- Own and manage the firm's security operations capability.
- Manage and continuously improve the firm's outsourced Security Operations Centre (SOC).
- Maintain responsibility for ISO27001 and Cyber Essentials Plus certification
- Lead, develop and mentor members of the Information Security team.
What we’re looking for
- Strong information security leadership experience, ideally within a legal, professional services or similarly regulated environment.
- Proven track record of owning, maintaining and continuously improving ISO27001 certification and associated information security governance.
- Experience managing outsourced security partners, including SOC services, incident response providers, and specialist security suppliers.
- Strong understanding of security operations, vulnerability management, threat detection, incident response, and remediation planning.
- Good understanding of cloud security, Microsoft/Azure environments, infrastructure security, SaaS assurance, and security architecture principles.
Why join us?
Kingsley Napley is known for its collaborative culture, high-quality work and commitment to inclusion. The role will work closely with the Chief Legal Officer to support the firms wider governance and compliance maters plus the Head of IT Operations, Head of Data and other key business stakeholders throughout the firm.
Our Benefits
- Pension
- Life assurance, permanent health insurance, private medical insurance and dental insurance
- Annual salary review, promotion opportunities and discretionary performance award
- 24/7 available Employee Assistance & Therapy programme
- 6 free 1-1 therapy sessions through Self Space
- Cycle to work scheme and in-office bike storage, season ticket loan
- Health screenings
- Holiday buy/sell/bank
- Retail & technology vouchers
- GymFlex: discounted gym rates, wellness subsidy, gym loan
- Holiday accrual with length of service
- Time off for good causes
About cyber security & digital forensics roles for ex-police
Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.
See all cyber security & digital forensics jobs in London →Why this fits a police background — match score 90/100
- Incident command & response
- Working to legislation & regulation
- Security operations
- Team & shift leadership
What cyber security & digital forensics roles pay ex-police
Advertised UK ranges, editorial estimates reviewed July 2026
| Digital forensics analyst | £32,000–£45,000 |
| DFIR consultant | £45,000–£65,000 |
| Senior forensics / IR specialist | £60,000–£80,000 |
| Threat-intelligence specialist | £55,000–£80,000 |