Information Security Manager

Jobgether

13d • $160,000 - $175,000 • Hybrid

About The Position

As an Information Security Manager, you will be responsible for shaping and overseeing the firm’s comprehensive information security program, ensuring the confidentiality, integrity, and availability of critical data and systems. You will work closely with IT leadership, legal teams, and executive management to implement security strategies that align with organizational goals and regulatory requirements. This role combines hands-on technical leadership, strategic planning, and team mentorship to safeguard sensitive information while enabling business operations. The position offers the opportunity to lead cybersecurity initiatives, manage risk, and continuously improve security processes in a dynamic, fast-paced professional environment.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; advanced degrees preferred.
• 7–10 years of progressive IT and information security experience, with at least 3 years in a leadership role.
• Strong knowledge of security frameworks and standards such as NIST, ISO 27001, and HIPAA.
• Experience in law firm or professional services technology environments, including document management, practice management, cloud platforms, and eDiscovery systems.
• Demonstrated ability to lead incident response, risk management, and compliance initiatives.
• Excellent verbal and written communication skills, with the ability to present complex security topics to non-technical stakeholders.
• Strong critical thinking, problem-solving, and project management skills, with the ability to manage multiple priorities effectively.
• Self-motivated and able to work independently while fostering collaboration across teams.

Nice To Haves

• CISSP, CISM, CISA, GIAC, CompTIA Security+, or GISO certifications are a plus.

Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures aligned with organizational objectives.
• Lead the firm’s comprehensive information security program, ensuring compliance with NIST, ISO, HIPAA, and client confidentiality obligations.
• Conduct risk assessments, vulnerability testing, and penetration testing, managing mitigation and remediation efforts.
• Manage incident response efforts, including investigation, remediation, reporting, and development of response playbooks.
• Oversee security tools such as firewalls, endpoint protection, SIEM, IAM, and cloud security solutions.
• Provide security training, awareness programs, and guidance to attorneys, staff, and vendors.
• Collaborate with IT, Legal, and Compliance teams to integrate security measures and manage vendor relationships.
• Mentor and manage security staff, promoting a culture of continuous improvement and cybersecurity excellence.

Benefits

• Competitive salary with targeted range of $160,000–$175,000, with performance-based bonus eligibility.
• Generous paid time off including vacation, personal days, holidays, and sick leave.
• Comprehensive medical, dental, and vision insurance options.
• Firm-paid life, accident, short-term, and long-term disability insurance.
• 401(k) Profit Sharing Plan and Cash Balance Retirement Plan with employer contributions.
• Employee Assistance Program (EAP) and wellness initiatives.
• Student loan refinancing assistance and fitness/gym reimbursement programs.
• Hybrid work schedules with partial in-office presence (per policy).

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 11-50 employees