Enterprise Security Compliance Manager
Latham & Watkins
full-time
Posted on:
Location Type: Hybrid
Location: Los Angeles • California • 🇺🇸 United States
Visit company websiteSalary
💰 $190,000 - $210,000 per year
Job Level
SeniorLead
About the role
- Managing the firm’s security compliance activities focused on third-party vendors
- Overseeing the firm’s vendor audit and third-party access review processes
- Engaging in a risk-based approach to determine the depth of each audit
- Organizing and conducting meetings of the firm’s Third Party Access Security Review Team, coordinating the assessment of vendors
- Arranging third-party penetration tests and vulnerability testing
- Reviewing firm contracts as part of the firm’s contract review process
- Supporting the client security review process on an overflow basis
- Evaluating the results of internal and external system vulnerability scans
- Tracking agreed security remediation efforts from vulnerability tests
- Enhancing the confidentiality, integrity, and availability of data at the firm
- Maintaining information security documentation and assisting in the development of security policies and procedures
- Promoting a culture of security throughout the firm
Requirements
- A bachelor's degree or diploma of higher education; equivalent experience in Security and Technology may be considered in lieu of a degree
- A bachelor’s degree in Information Systems, Computer Science, Engineering, or a related field, preferably
- A recognized security certification, preferably
- A minimum of five (5) years of experience in information security
- A minimum of ten (10) years of experience working in information technology
- A minimum of two (2) years of experience applying project management concepts
- Experience working in a law practice office, preferably
Benefits
- Healthcare, life and disability insurance
- A generous 401k plan
- At least 11 paid holidays per year, and a PTO program that accrues 23 days during the first year of employment and grows with tenure
- Well-being programs (e.g. mental health services, mindfulness and resiliency, medical resources, well-being events, and more)
- Professional development programs
- Employee discounts
- Affinity groups, networks, and coalitions for lawyers and staff
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
security compliancevendor auditthird-party access reviewrisk-based auditingpenetration testingvulnerability testingsystem vulnerability scanssecurity remediationinformation security documentationsecurity policies and procedures
Soft skills
organizational skillscommunication skillsteam coordinationmeeting facilitationculture promotion
Certifications
recognized security certification