About the Role
This position is posted by Jobgether on behalf of a partner company. We are currently looking for an Information Security Manager in the United States.
The Information Security Manager will lead the development and implementation of a comprehensive security program designed to protect organizational data, systems, and client information. This role combines strategic leadership with hands-on technical oversight, ensuring the confidentiality, integrity, and availability of all information assets. You will collaborate closely with IT, legal, and compliance teams to maintain regulatory compliance, manage risks, and oversee security operations. Additionally, you will mentor security staff, guide incident response efforts, and advise leadership on emerging threats. This position offers the opportunity to shape a robust security posture within a complex, high-stakes, and fast-paced professional environment.
Accountabilities
- Develop, maintain, and enforce information security policies, standards, and procedures.
- Lead the design and execution of a firm-wide security program aligned with strategic objectives and client confidentiality obligations.
- Conduct risk assessments, vulnerability testing, and penetration assessments, providing recommendations to mitigate threats.
- Oversee incident response activities, including investigation, remediation, and reporting.
- Develop and run tabletop exercises and playbooks to ensure preparedness for potential security incidents.
- Manage security technologies, including firewalls, SIEM, IAM, and endpoint protection solutions.
- Conduct security training and awareness programs for employees and leadership.
- Collaborate with IT, Legal, and Compliance teams on vendor management, cloud security, and system integrations.
- Mentor and manage security staff, ensuring professional development and team effectiveness.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field (advanced degree preferred).
- Minimum 7–10 years of progressive IT and information security experience, with at least 3 years in a leadership role.
- Proven expertise with security frameworks and standards such as NIST, ISO 27001, and HIPAA.
- Strong understanding of professional services or law firm technology environments, including document management, practice management, cloud platforms, and eDiscovery systems.
- Experience leading incident response, risk management, and compliance initiatives.
- Professional certifications such as CISSP, CISM, CISA, GIAC, or Security+ are a plus.
- Excellent communication and interpersonal skills, capable of presenting complex security topics to senior leadership and non-technical stakeholders.
- Strong critical thinking, problem-solving, and time management abilities.
- Self-motivated, collaborative, and able to work independently in a dynamic environment.
Benefits
- Competitive base salary: $160,000–$175,000 annually, with discretionary bonuses and raise eligibility.
- Generous paid time off including vacation, personal days, holidays, and sick leave.
- Comprehensive medical, dental, and vision insurance options.
- Firm-paid short- and long-term disability, life and accident insurance.
- 401(k) profit-sharing and cash balance retirement plans with employer contributions.
- Employee Assistance Program (EAP) and wellness benefits.
- Student loan refinancing discounts and fitness/gym reimbursement programs.
- Hybrid work schedule with flexibility, requiring in-office presence at least three days per week.
