{"id":2208156,"url":"https://alion.io/job/dlapiper-information-security-governance-lead","title":"Information Security Governance Lead","company":{"id":1754449,"name":"DLA Piper","domain":"dlapiper.com","url":"https://alion.io/company/dlapiper-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":32,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Amsterdam, Netherlands"],"countries":["NL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":113000,"max_usd":294000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":679},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-06T05:41:09Z","employer_posted_date":null,"last_verified_at":"2026-10-06T05:41:09Z","board_verified":false,"closed_at":null,"days_open":15,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":15},"description":"Legal, Risk and Compliance\n\nInformation Security Governance Lead: To lead the firm's information security assurance activities, maintain the firm's information security certifications by coordinate of certification activities, and provide independent assessment of security control effectiveness. To also assist in the firm's information security risk management framework, working with the enterprise risk team.\n\nThe role helps ensure that security controls continue to protect the organisation, support client commitments and enable the firm to meet its regulatory and contractual obligations within it's risk tolerance.\n\nLondon, United Kingdom\n\n Leeds, United Kingdom\n\nMain duties and responsibilities\n\n Own and maintain the ISO 27001:2022 Information Security Management System\n\n Coordinate internal and external certification audits\n\n Manage the lifecycle of policies, standards and supporting documentation\n\n Facilitate management reviews and support continual improvement activities\n\n Ensure security governance processes remain aligned to business objectives and evolving risk\n\n Design and operate a programme of security control testing and assurance activities\n\n Assess the effectiveness of administrative, technical and operational controls\n\n Produce assurance reports and communicate outcomes to relevant stakeholders\n\n Monitor remediation activities and support closure of identified weaknesses\n\n Develop assurance dashboards, metrics and management reporting\n\n Support the ongoing maturity of the security governance framework\n\n Review the impact of regulatory, industry and client requirements on the control environment\n\n Contribute to internal security awareness and governance initiatives\n\n Support external client requests relating to security assurance and certification activities where required\n\n Facilitate identification, assessment and evaluation of security risks\n\n Provide analysis and recommendations to support risk-based decisions\n\n Monitor risk treatment activities and provide challenge where appropriate\n\n Support risk acceptance and exception management processes\n\nAbout you\n\nEssential:\n\n Experience operating or supporting an ISO 27001 Information Security Management System\n\n Knowledge of information security control frameworks and assurance methodologies\n\n Knowledge of Cyber Essentials Plus\n\n Ability to assess the effectiveness of security controls and identify improvement opportunities\n\n Experience coordinating audit, certification or assurance activities\n\n Ability to translate technical and governance topics into practical business outcomes\n\n Experience presenting security findings, recommendations and risk information to stakeholders\n\n Experience identifying, assessing and managing information security risks\n\n Understanding of information security threats, vulnerabilities and control environments\n\n Experience applying risk management principles, frameworks and methodologies\n\n Ability to evaluate the potential business impact of security risks and control gaps\n\nValuable Experience:\n\n Internal audit, risk management, compliance, technology assurance or operational resilience experience\n\n Knowledge of frameworks such as NIST CSF, CIS Controls, SOC 2 or similar industry standards\n\n Experience within regulated or client-facing environments\n\n Relevant professional qualifications such as ISO 27001 Lead Implementer, Lead Auditor, CISSP, CISM, CRISC or equivalent\n\nAbout us\n\nWe're a global law firm helping our clients achieve their goals wherever they do business. Our pursuit of innovation has transformed our delivery of legal services. With offices in the Americas, Europe, the Middle East, Africa and Asia Pacific, we deliver exceptional outcomes on cross-border projects, critical transactions and high-stakes disputes.\n\nAgile Working\n\nWe recognise that people have responsibilities and interests outside of their career and that as a business, we all benefit from working flexibly. That’s why we are open to discussing with candidates the different ways in which we are able to support requests for agile working arrangements.\n\nPre-Engagement Screening\n\nIn the event that we make an offer to you, and where local legislation permits, we will conduct pre-engagement screening checks that may include but are not limited to your professional and academic qualifications, your eligibility to work in the relevant jurisdiction, any criminal records, your financial stability, and references from previous employers.","description_format":"text","description_chars":4472,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-10T00:15:00Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Graduate Trainee, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Global Business Mobility: Graduate Trainee; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-20T06:21:30+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":68,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.894,"p_room":0.9,"age_days":15,"expected_fill_days":32,"reasons":["seen:15","velocity","win:mid","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/dlapiper-information-security-governance-lead","json_url":"https://alion.io/job/dlapiper-information-security-governance-lead.json","meta":{"generated_at":"2026-10-21T06:13:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9034,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1754449},"rest":"https://alion.io/mcp/rest/get_company?id=1754449"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdlapiper-information-security-governance-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdlapiper-information-security-governance-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdlapiper-information-security-governance-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dlapiper-information-security-governance-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdlapiper-information-security-governance-lead"}]}