Information Security Lead

Join us for a bright future...Discover where your talent fits best at ALM!

Our network of more than 450+ employees globally is united by a shared understanding that the work we do makes a direct impact on the success of our customers and audiences. Our collaborative environment provides a vast amount of opportunities for career development. Our goal is to hire industry's top talent, offer growth opportunities and provide a fulfilling working environment.

Here at ALM, we are a customer-focused and market-driven company dedicated to the success of the customers we serve with our information products and marketing services and events. Across ALM, our teams deliver premium content to professionals in the legal, finance, real estate and insurance industries.

We promote and value innovation and an entrepreneurial spirit. We believe that integrity must be at the heart of everything we do. We foster an environment of trust and teamwork and believe that employee empowerment drives our progress and success as a business. We insist on quality and continuous improvement in all that we do. We have a winning attitude and seek to celebrate all of our successes ... big and small.

Salary Range : 100,000 - 107,000 USD Annually

The referenced salary range is based on the Company's good faith belief at the time of posting. Total compensation may vary based on factors such as geographic location, work experience, market conditions, education / training and skill level.

Role Purpose : The Information Security Lead is responsible for safeguarding the global Law Business Research and ALM organization's information assets across cloud, on-prem, and managed service environments. The role focuses on strengthening security controls, operating SOC processes, enhancing monitoring and detection capabilities, leading incident response, managing vulnerabilities, supporting compliance frameworks, and engineering security improvements across the UK and US.

Key Responsibilities

Security Operations & Monitoring (SOC)

• Maintain and enhance the security posture across Microsoft 365, Azure, Intune, Defender, Sentinel SIEM, Cloudflare, and on-prem environments.
• Monitor and triage security alerts, anomalous activity, and threat indicators.
• Develop and tune SIEM dashboards, alerts, correlation rules, and automation playbooks.
• Manage SIEM log ingestion and integrations.
• Operate and optimise EDR, identity protection tools, DLP, conditional access, MFA, email security, and NGINX App Protect.
• Oversee DNS and email authentication security (SPF, DKIM, DMARC).

Incident Response & Threat Handling

Vulnerability Management & Penetration Testing

Cloudflare, DNS & Network Security

Governance, Risk & Compliance (GRC)

Cyber Essentials / Cyber Essentials Plus

Cloud, M365 & On-Prem Security Management

Security Architecture & Application Security

Awareness, Training & Culture

Continuous Improvement & Threat Intelligence

Required Experience

Frameworks & Standards

Soft Skills

Preferred Certifications

Why you should join ALM...

ALM provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, veteran status, national origin, age, disability or genetics. In addition to federal law requirements, ALM complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.