Enterprise Security Compliance Lead

Latham & Watkins; Los Angeles (CA); Hybrid; USD 160,000 - 180,000; Full time

Benefits offered by this job

Healthcare & disability

401k plan

Paid holidays

PTO accrual

Well-being programs

Professional development

Employee discounts

Affinity groups

Job summary

Latham & Watkins seeks an Enterprise Security Compliance Lead for its Global Services Office in downtown Los Angeles. You will coordinate client and vendor audits, manage ISO 27001 assessments, and drive remediation and responses from intake to closure, partnering with security and risk teams.

The role blends project management, documentation, and stakeholder coordination to ensure timely and accurate audits, secure data handling, and clear reporting to senior management.

Qualifications

• Bachelor's degree or equivalent; 5+ years security/tech experience may substitute for degree
• Bachelor’s in Information Systems, CS, Engineering or related field (preferred)
• Security certifications (CISA, CRISC, CDPSE, CISSP) preferred
• 5+ years IT audit or IT risk management experience
• 3+ years security assessments, IT vendor risk assessments, vulnerability management reviews
• 2+ years project management experience

Responsibilities

• Coordinate client and vendor security audits and other assessments
• Lead ISO 27001 activities, survey responses, and documentation
• Assemble relevant documentation and manage intake through closure
• Create reports and presentations for senior management
• Protect and manage highly sensitive company information

Skills

Security audits

Project management

IT risk management

Vendor risk assessments

Penetration testing

Information security

Stakeholder coordination

Education

Bachelor's degree

Information Systems

Computer Science

Job description

About Latham & Watkins

Latham & Watkins is one of the world’s leading global law firms advising the businesses and institutions that drive the global economy. We are the market leaders in major financial and business centers around the world. Our investment in people, commitment to innovation, and focus on the future empower you to build an incredible career and thrive as an exceptional professional in a supportive culture. If you aspire to be the best, and work with the best, this is where you belong.

About The Role

The Enterprise Security Compliance Lead is an integral part of Latham’s Global Security and Risk Management team. This role will be responsible for coordinating activities related to client security audits, vendor security audits, and other security compliance needs including ISO 27001 assessments, penetration test remediations, and other client responses, while leading assigned client security reviews from intake through closure by identifying necessary internal stakeholders based on the request (e.g., security survey, audit, review.), assembling relevant and appropriate documentation, and completing the appropriate forms and questionnaires required by Latham clients. This role will be located in our Global Services Office in downtown Los Angeles. Please note that this role may be eligible for a flexible working schedule that allows for a hybrid and in-office presence.

Responsibilities & Qualifications

Other key responsibilities include:

• Maintaining relationships with third-party audit services that audit firm vendors, conduct audits of the firm on behalf of clients, or otherwise audit or evaluate the firm (e.g., ISO 27001 assessors, independent consultants)
• Acting as a project manager to ensure the success of ISO 27001, client and vendor audits, and other assessments (e.g., identifying internal stakeholders, establishing schedules and coordinating with others to meet deadlines, assembling relevant and appropriate documentation, completing necessary responses, and tracking necessary follow-up)
• Supporting compliance activities related to penetration testing and vulnerability testing, including the identification of critical systems, external testing requirements and frequency, coordination with Security Operations, and follow-up on remediation activities to ensure established processes are followed and required SLAs are met
• Coordinating team activities and reviews work for consistency and quality
• Creating reports and presentations for senior management
• Protecting and maintaining any highly sensitive, confidential, privileged, financial, and/or proprietary information that Latham & Watkins retains

We’d love to hear from you if you:

• Exhibit an understanding of business security practices and procedures
• Possess knowledge of information security technologies
• Demonstrate knowledge of a variety of communication protocols and encryption techniques/tools

And have:

• A bachelor's degree or equivalent; a minimum of five (5) years of Security and Technology experience may be considered in lieu of a degree
• A bachelor’s degree in Information Systems, Computer Science, Engineering or related field, preferably
• Recognized security certifications (e.g., CISA, CRISC, CDPSE, CISSP), preferably
• A minimum of five (5) years of experience in IT audit or IT risk management
• A minimum of three (3) years of experience in performing security assessments, IT vendor risk assessments, and vulnerability management reviews
• A minimum of two (2) years of experience applying project manage ment concepts

Benefits & Additional Information

Successful candidates will not only be provided with an outstanding career opportunity and welcoming environment, but will also be provided with a generous total compensation package with bonuses awarded in recognition of both individual and firm performance. Eligible employees can participate in Latham’s comprehensive benefit program which includes:

• Healthcare, life and disability insurance
• A generous 401k plan
• At least 11 paid holidays per year, and a PTO program that accrues 23 days during the first year of employment and grows with tenure
• Well-being programs (e.g. mental health services, mindfulness and resiliency, medical resources, well-being events, and more)
• Professional development programs
• Employee discounts
• Affinity groups, networks, and coalitions for lawyers and staff

Latham & Watkins is an equal opportunity employer. The Firm prohibits discrimination against any employee or applicant for employment on the basis of race (including, but not limited to, hair texture and protective hairstyles), color, religion, sex, age, national origin, sexual orientation, gender identity, veteran status (including veterans of the Vietnam era), gender expression, marital status, or any other characteristic or condition protected by applicable statute.

Latham & Watkins LLP will consider qualified applicants with criminal histories in a manner consistent with the City of Los Angeles Fair Chance Initiative for Hiring Ordinance (FCIHO).

Pay Range

USD $160,000.00 - USD $180,000.00 /Yr.