Enterprise Security Compliance Manager

Latham & Watkins LLP • Los Angeles, CA

5d • $195,000 - $215,000 • Hybrid

About The Position

The Enterprise Security Compliance Manager is an integral part of Latham’s Global Security and Risk Management team. This role will be responsible for managing the firm’s security compliance activities, while leading responses to client security questionnaires, assessments, and RFP requests by coordinating with stakeholders, preparing documentation, drafting responses, validating control operation, confidently explaining system architecture and security mechanisms to assessors, and tracking follow-up actions. This role will be located in our Global Services Office located in downtown Los Angeles. Please note that this role may be eligible for a flexible working schedule that allows for a hybrid and in-office presence.

Requirements

• Exhibit the ability to communicate effectively and collaboratively with clients, vendors, and colleagues at all organizational levels.
• Demonstrate experience managing client security due diligence activities and responding to security questionnaires and related inquiries.
• Possess the ability to communicate technical concepts effectively, both verbally and in writing, and translate technical risks into business-focused language for non-technical audiences.
• A bachelor’s degree or Diploma of Higher Education or sufficient security and technology experience, preferably a bachelor’s degree in Information Systems, Computer Science, Engineering, or related field.
• Relevant security and audit certifications (e.g., CISA, CISSP, CISM), preferably.
• A minimum of ten (10) years of experience in a combination of GRC, technology risk, compliance, audit/cybersecurity assurance, security governance, and/or operational resilience experience.
• A minimum of two (2) years of experience in a leadership role.
• A minimum of two (2) years of experience applying project management concepts.

Nice To Haves

• Experience working in a law practice office, preferably.

Responsibilities

• Manage the firm’s security compliance activities.
• Lead responses to client security questionnaires, assessments, and RFP requests by coordinating with stakeholders, preparing documentation, drafting responses, validating control operation, confidently explaining system architecture and security mechanisms to assessors, and tracking follow-up actions.
• Contribute to the maturation and scalability of the compliance program by helping standardize control design, documentation, evidence collection, and operating procedures to continually improve audit efficiency, consistency, and repeatability.
• Lead the operation of the compliance governance processes, including control ownership, compliance monitoring, issue tracking, and exception management, to help maintain sustained audit readiness and control effectiveness.
• Identify opportunities to mature the compliance program through automation, continuous monitoring, improved evidence practices, and more scalable audit readiness processes.
• Lead the certification program for ISO 27001, end-to-end from scoping through audit closure.
• Arrange penetration and vulnerability testing by identifying and negotiating with vendors and scheduling testing, then following up on results delivered.
• Protect and maintain any highly sensitive, confidential, privileged, financial, and/or proprietary information that Latham & Watkins retains.

Benefits

• Healthcare, life and disability insurance
• A generous 401k plan
• At least 11 paid holidays per year
• A PTO program that accrues 23 days during the first year of employment and grows with tenure
• Well-being programs (e.g. mental health services, mindfulness and resiliency, medical resources, well-being events, and more)
• Professional development programs
• Employee discounts
• Affinity groups, networks, and coalitions for lawyers and staff

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level