Redgrave LLP

Security Engineer

• Define and execute a Firm-wide cybersecurity strategy aligned with NIST CSF, NIST AI RMF 1.0, ISO 27001, and SOC 2 frameworks
• Own and continuously mature the Firm's Information Security Management System (ISMS)
• Lead ISO 27001 gap analysis and establish a roadmap toward certification
• Develop, maintain, and enforce security policies, standards, procedures, and governance structures
• Define and track key risk indicators (KRIs), metrics, and reporting frameworks
• Serve as the Firm's executive owner of AI security and governance
• Design and implement a scalable AI governance framework, including acceptable use standards, risk-tiering criteria, and data handling controls
• Own the Firm's vendor risk management program, including intake, risk-tiering, assessment, and continuous monitoring
• Own the Firm's SOC 2 Type II program, including control maintenance, evidence collection, and auditor engagement
• Provide executive oversight of security architecture across Microsoft 365 and Azure

Information Security Director – ISD

Infrastructure Engineer

• Design, provision, and maintain secure developer environments and cloud infrastructure for AI workloads
• Build and operate CI/CD pipelines, source control workflows, and containerized environments (Docker, Kubernetes)
• Configure, manage, and optimize Databricks in Azure for large-scale data processing and analytics
• Define and maintain infrastructure-as-code (Terraform, Bicep) for reproducible and auditable environments
• Implement centralized logging, monitoring, and alerting for proactive issue detection and rapid incident response
• Stand up matter-specific infrastructure (compute, storage, databases, AI services) with proper isolation and lifecycle management
• Operate across Azure (primary), AWS, and Google Cloud, including identity, networking, cost allocation, and governance
• Ensure protection of client data at rest and in transit, including attorney-client privileged information and ethical wall requirements
• Maintain incident-response procedures and provide after-hours support when required for time-sensitive matters
• Manage API access, usage limits, and costs across AI model providers (e.g., OpenAI, Anthropic)
• Scale AI systems from prototype to production, including high-volume batch pipelines touching millions of documents
• Create and maintain architecture diagrams, documentation, and operational runbooks

Information Security Director – ISD

Cloud Infrastructure Engineer – AI Innovation