Salary not listedPosted 34m ago
Real job — pulled straight from Law Business Research’s careers page · Verified November 10, 2026 · No reposts.
Job description
Law Business Research is hiring a Head of Information Security — a full-time, based in London, England role. Apply directly on Law Business Research's careers page below.
Head of InfoSec
Department: Business Operations
Employment Type: Full Time
Location: London, London, Hybrid
The Head of Information Security is responsible for establishing, owning, & driving the global information & cyber security strategy for Centellic. This role provides leadership, governance, & oversight across cyber security, information security, risk management, business continuity, disaster recovery and customer assurance (DDQs).
This position will oversee all security operations, develop enterprise security policies & frameworks, manage third-party risk and lead resilience planning. The Head of Information Security will directly manage the Information Security team and act as the senior authority for cyber & information security within the organisation.
Key Responsibilities
Strategic Leadership & Governance
- Develop & own the global information security strategy & roadmap.
- Establish, maintain, & enforce security policies, standards, & procedures.
- Inform stakeholders through reporting on risk, posture, compliance, & incidents.
- Ensure alignment with business strategy, technology transformation, & operational resilience programmes.
- Attend Information Security governance forums & represent security in senior management discussions.
- Liaise with the Data Protection Officer to align security controls with privacy obligations and regulatory requirements.
Cyber Security & Security Operations Oversight
- Oversee global SOC operations including monitoring, detection, incident triage, & forensic investigations.
- Ensure advanced protection across Microsoft 365, Azure, Intune, Defender, Sentinel SIEM, Cloudflare, DNS, & on-prem environments.
- Lead the improvement of SIEM engineering, log ingestion, alerting, correlation, & automation.
- Ensure continuous protection of identity, endpoints, networks, & cloud services.
Incident Response & Threat Management
- Act as executive owner of the global Incident Response process.
- Lead major incidents, including ransomware, credential compromise, cloud intrusion, web security incidents, or DDoS events.
- Manage RCA, reporting, containment, & lessons-learned processes.
- Maintain, test, & improve incident response plans across UK & US operations.
Risk Management, Assurance & Compliance
- Own the global information security risk management framework & risk register.
- Lead all customer assurance & Due Diligence Questionnaire (DDQ) responses.
- Manage compliance with ISO 27001/27002, NIST CSF, SOC 2, CIS, DORA, CE/CE+ requirements.
- Oversee internal/external audits, ensuring evidence collection, remediation tracking, & executive reporting.
- Perform supplier & project risk assessments & approve controls for new systems & services.
Vulnerability Management & Penetration Testing
- Own the global vulnerability lifecycle, including scanning, reporting, prioritisation, & validation.
- Manage annual penetration testing programmes, including remediation.
- Ensure ongoing alignment with industry baselines & benchmarks.
- Oversee privileged access reviews & secure configuration governance.
Business Continuity (BCP) & Disaster Recovery (DR)
- Own & maintain the enterprise BCP & DR strategy & documentation.
- Ensure regular testing, validation, & continuous improvement across all regions.
- Work IT Op, Product / Tech, & business leaders to enhance resilience.
Cloud, Infrastructure & Application Security
- Oversee secure configuration & governance of Azure, M365, identity, networking, servers, & firewalls.
- Ensure that new & existing applications undergo appropriate security assessment & review.
- Govern Cloudflare, WAF, bot management, DNS security, & zero trust implementations.
Third-Party, Vendor & Customer Assurance
- Lead vendor security assessments & approve or reject high-risk suppliers.
- Ensure third-party SOC, compliance, & security requirements are met.
- Own the timely & accurate completion of customer security questionnaires, audits, & DDQs.
People Leadership & Collaboration
- Directly manage & develop the Information Security Lead
- Build strong relationships with all functional teams
- Promote & sustain a strong global “security-first” culture.
- Deliver ELT communication, training, & guidance across the organisation.
Awareness, Training & Culture
- Oversee global security awareness programmes, phishing simulations, & targeted training.
- Ensure consistent & high-quality communication across global teams.
Skills Knowledge and Expertise
Experience
- 7–10+ years of progressive experience in Information Security, Cyber Security, Governance, or similar.
- Experience leading a global or multi-region security function.
- Strong background in Microsoft cloud security, SOC operations, risk, compliance, & resilience.
- Demonstrated leadership in managing incidents, risk remediation, & security programmes.
- Experience managing or partnering with engineering, infrastructure, & cloud teams.
Knowledge of Frameworks
- ISO 27001/27002
- NIST CSF
- CIS Controls
- SOC 2
- Cyber Essentials / CE+
- DORA & financial/US regulatory frameworks (beneficial)
- GDPR & US privacy regulations (beneficial)
Soft Skills
- Strong leadership with the ability to influence at executive level.
- Excellent communication skills across technical & non-technical groups.
- Clear, calm, & structured thinking under pressure.
- Ability to manage competing global priorities & drive results.
Preferred Certifications
- CISSP, CISM, or CISA
- Microsoft SC-series (SC200, SC300, SC400)
- Azure Security Engineer (AZ500)
- GIAC, CEH, or similar
About Centellic
Centellic stands at the center of the markets it serves, empowering organizations with indispensable data and insight to make critical decisions on growth, risk and opportunity.
Through proprietary data, deep market expertise and AI-enabled technology, our platforms are embedded in client workflows. That capability is underpinned by our events, which bring the market together to share perspective and deepen understanding of the issues shaping each sector. Together, they give organizations earlier visibility of emerging trends, and the clarity and confidence to act when decisions matter.
At Centellic, we’re a global intelligence and information services business, setting the standard for how critical business decisions are made.
Why Centellic?
At Centellic, we help our clients make better decisions, and our people are at the heart of that work. Every individual plays an important role in this, bringing curiosity and high standards to everything they do.
Those who thrive here take ownership, care deeply about their work and are committed to excellence. Standards are high because our people set them that way. And while we have decades of expertise, we are still growing, pushing and building something extraordinary.
Centellic’s advantage is our people and the culture we’ve created together. It’s an environment where individuality is encouraged, relationships are genuine, and there’s a strong sense of purpose in what we’re building together. Collaborative, respectful and driven, we take our work seriously without taking ourselves too seriously.
Benefits
Our people are our most valuable asset, as such, we offer a wide range of benefits to help ensure that all are supported:
Start of employment:
- Eye care
- Employee Assistance Programme
- A day off for your birthday
After 3 months employment:
- Pension (4% employer contribution and 4% employee contribution)
After 4 months employment:
- Life assurance
After probation:
- Cycle to work scheme
- Season ticket loan
- £350 annual wellbeing allowance to contribute to gym memberships or fitness classes
- Puregym access
- Perks at work platform access
After 1 year service:
- Private healthcare
Additional Perks:
- Company socials
- Access to Employee Affinity Networks
- Mentoring scheme
- Volunteering Day
- Mortgage Advice
- Work from anywhere (2 weeks)
- Generous parental leave
We are committed to making our organisation an inclusive, respectful & engaging place to work with a culture shaped by our core values that promote equality, collaboration & respect in everything we do. We are proud to be part of the Disability Confident Scheme, meaning we are committed to being inclusive and accessible, which starts with our application and recruitment process. If you do require any reasonable adjustments to be made, please let us know as part of our application page.
‘We are proud to be an equal opportunities employer and are committed to ensuring that all candidates are given the same opportunity to succeed regardless of their sex, gender identity/expression or reassignment, sexual orientation, marital status, race, colour, nationality, ethnic or national origin, religion, age or disability.’
‘We are proud to be an equal opportunities employer and are committed to ensuring that all candidates are given the same opportunity to succeed regardless of their sex, gender identity/expression or reassignment, sexual orientation, marital status, race, colour, nationality, ethnic or national origin, religion, age or disability.’
Get Head of Information Security jobs like this→
New roles from thousands of companies land hourly, straight from their careers pages. Get the freshest matches by email so you never miss one.
Email me new jobsSimilar jobs
Principal Attack Engineer, AI/LLM (Remote)
$238k–$280kRemote · US-eligible
✓ From careers page· 3d ago
Lead Analyst, Operational Technology Cybersecurity
$97k–$143kBeachwood, OH
✓ From careers page· 3d ago
Frequently asked questions
What skills are required for Head of Information Security at Law Business Research?
The required skills for Head of Information Security at Law Business Research include: Cybersecurity, ISO 27001, SOC 2, GDPR, Microsoft 365, Azure, DNS, CISSP, CISM, CISA.
What is the seniority level for Head of Information Security at Law Business Research?
Head of Information Security at Law Business Research is a Manager / Senior level position.
How do I apply for Head of Information Security at Law Business Research?
You can view the full description and apply for Head of Information Security at Law Business Research on EchoJobs: https://echojobs.io/job/law-business-research-head-of-infosec-business-operations-0jyw7.