Information Security Support Assistant

Wheeler Trigg Odonnell LLP•Denver, CO

9d•$75,000 - $85,000•Hybrid

About The Position

The Information Security Support Assistant is a pivotal member of WTO’s Information Services department, responsible for safeguarding the firm’s information assets while providing day-to-day technical support to end users and firm operations. This role focuses on implementing and maintaining robust security practices, managing compliance documentation, and responding to security events, while also delivering high-quality technical assistance for hardware, software, and connectivity issues. The Assistant will report to the Chief Information Officer.

Requirements

Associate’s Degree in Computer Science, Computer Information Systems or equivalent information security certifications in current technology.
Foundational knowledge of ISO 27001 compliance, security documentation, and risk management practices.
Foundational experience with endpoint security tools (CrowdStrike, Arctic Wolf Networks, and ThreatLocker), email security platforms (Mimecast), and vulnerability management.
Familiarity with change control processes, access reviews, and security monitoring solutions.
Familiarity in troubleshooting Windows environments, Microsoft 365 applications, Intune device management, and remote access technologies (Citrix and Zscaler).
Strong problem-solving skills, attention to detail, and ability to learn quickly from senior professionals.
Excellent written and verbal communication skills.

Nice To Haves

Bachelor’s Degree helpful.
Relevant security certifications (e.g., Microsoft Azure Administrator, CompTIA Security+, ISO 27001 Lead Implementer).
1+ years working in medium-sized (100+ users) offices in a technical support/help desk position.
Prior law firm experience a plus.

Responsibilities

Provide technical support for multiple products to internal users.
Timely resolve problems or escalate as necessary.
Serve as an integrated team member for technology support team.
Work incoming tickets and answer calls to the service desk.
Troubleshoot basic issues with Windows desktop and laptop equipment, printers, network connections, smartphones etc.
Create and maintain documentation for security and technical support processes, solutions, and procedures.
Analyze, troubleshoot, diagnose, and solve basic issues with the Microsoft Office 365 suite of products, Windows 11, file sharing services, and other software applications.
Assist with ISO 27001:2022 documentation, evidence collection, and ongoing compliance activities, including supporting audits and maintaining security controls.
Assist in the coordination and performing of vendor and user access reviews, ensuring proper authorization and documentation for internal and external system access.
Assist in the response to outside counsel guidelines and data security requirements, collaborating with legal and IS teams to address client and regulatory needs.
Assist in the monitoring, investigation, and responding to phishing and SPAM reports using Mimecast; educate users on best practices for email security with KnowBe4.
Support endpoint protection efforts using CrowdStrike, Arctic Wolf Networks, and ThreatLocker, including incident response and remediation of security threats.
Assist in change control and continual improvement processes for security operations, documenting system changes and proposing enhancements to procedures.
Assist in review and maintain baseline security configurations for servers, endpoints, and network devices to ensure compliance with firm standards.
Respond to vulnerability notifications, collaborating with IS staff to remediate risks and document corrective actions.
Work with Arctic Wolf Networks to monitor, analyze, and respond to network and endpoint security events; escalate incidents as necessary.
Suggest improvements to the firm’s security operations, participating in process reviews and recommending technical or procedural updates.
Provide technical support for hardware, software, connectivity, and remote access issues; resolve or escalate service desk tickets as appropriate.
Deliver quality customer service, ensuring timely and effective resolution of end user requests in a collaborative team environment.
Perform other duties as assigned or required to support the firm’s security and technology operations.