Information Security Director – ISD

Redgrave LLP

Information Security Director leading firm-wide cybersecurity strategy and governance at Redgrave LLP. Ensuring data protection and compliance across all systems and emerging technologies.

Posted 6/10/2026full-timeRemote • Virginia • 🇺🇸 United StatesLead💰 $195,000 - $240,000 per yearWebsite

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

cybersecurity strategyNIST CSFNIST AI RMF 1.0ISO 27001SOC 2Information Security Management System (ISMS)risk indicatorsAI governance frameworkvendor risk managementsecurity architecture

Soft Skills

leadershipprogram ownershipexecutive oversight

Tools & Technologies

Microsoft 365Azureenterprise security tooling

Certifications & Qualifications

CISSPCISM

Industry Keywords

cloud securityvendor riskcompliance frameworksSOC 2 programslaw firmprofessional services

Tech Stack

Tools & technologies

AzureCloudCyber Security

About the role

Key responsibilities & impact

Define and execute a Firm-wide cybersecurity strategy aligned with NIST CSF, NIST AI RMF 1.0, ISO 27001, and SOC 2 frameworks
Own and continuously mature the Firm's Information Security Management System (ISMS)
Lead ISO 27001 gap analysis and establish a roadmap toward certification
Develop, maintain, and enforce security policies, standards, procedures, and governance structures
Define and track key risk indicators (KRIs), metrics, and reporting frameworks
Serve as the Firm's executive owner of AI security and governance
Design and implement a scalable AI governance framework, including acceptable use standards, risk-tiering criteria, and data handling controls
Own the Firm's vendor risk management program, including intake, risk-tiering, assessment, and continuous monitoring
Own the Firm's SOC 2 Type II program, including control maintenance, evidence collection, and auditor engagement
Provide executive oversight of security architecture across Microsoft 365 and Azure

Requirements

What you’ll need

10+ years of progressive experience in information security, including leadership and program ownership roles
CISSP (required); CISM or equivalent considered
Demonstrated experience leading or scaling a security program; law firm or professional services preferred
Strong experience with cloud security, vendor risk, and compliance frameworks
Experience with SOC 2 programs and enterprise security tooling in Microsoft environments

Benefits

Comp & perks

medical, dental, and vision coverage
401(k) plan
additional benefits to help you prepare for retirement
free access to Employee Assistance Programs
other programs designed to help you and your family stay healthy, feel secure, and enjoy a positive work/life balance