Enterprise Security Compliance Manager

Latham & Watkins; Los Angeles (CA); Hybrid; USD 195,000 - 215,000; Full time

Benefits offered by this job

Healthcare

401(k) plan

Paid holidays

PTO

Well-being programs

Professional development

Employee discounts

Affinity groups

Job summary

Latham & Watkins, located in Downtown Los Angeles, seeks an Enterprise Security Compliance Manager to join the Global Security & Risk Management team. This role leads security compliance activities, responses to client questionnaires, assessments, and RFPs, coordinating with stakeholders while drafting documentation and validating controls.

The position emphasizes governance, ISO 27001 certification, and vendor testing with a hybrid/office schedule in Los Angeles and opportunities for flexible

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Engineering, or related field.
• Security and audit certifications such as CISA, CISSP, or CISM.
• Ten years in GRC, technology risk, compliance, audit/cybersecurity assurance, governance, and/or operational resilience, with at least two years in a leadership role.
• At least two years of experience applying project management concepts.
• Experience working in a law practice office.

Responsibilities

• Standardize control design, documentation, evidence collection, and operating procedures to improve audit efficiency and repeatability.
• Lead governance processes, including control ownership, compliance monitoring, issue tracking, and exception management.
• Identify opportunities to mature the program through automation and improved evidence practices.
• Lead the ISO 27001 certification end-to-end from scoping to audit closure.
• Arrange penetration and vulnerability testing with vendors, scheduling and following up on results.
• Protect and maintain highly sensitive, confidential, or proprietary information.

Skills

Communication

Security governance

GRC

Project management

Education

Bachelor's degree in Information Systems/Computer Science/Engineering

Job description

About Latham & Watkins

Latham & Watkins is one of the world’s leading global law firms advising the businesses and institutions that drive the global economy. We are market leaders in major financial and business centers around the world. Our investment in people, commitment to innovation, and focus on the future empower you to build an incredible career and thrive as an exceptional professional in a supportive culture. If you aspire to be the best, and work with the best, this is where you belong.

About The Role

The Enterprise Security Compliance Manager is an integral part of Latham’s Global Security and Risk Management team. This role will be responsible for managing the firm’s security compliance activities, leading responses to client security questionnaires, assessments, and RFP requests, coordinating with stakeholders, preparing documentation, drafting responses, validating control operation, confidently explaining system architecture and security mechanisms to assessors, and tracking follow‑up actions. The role will be located in our Global Services Office in downtown Los Angeles and may offer a flexible working schedule that allows for a hybrid and in‑office presence.

Responsibilities & Qualifications

• Contribute to the maturation and scalability of the compliance program by standardizing control design, documentation, evidence collection, and operating procedures to continually improve audit efficiency, consistency, and repeatability.
• Lead the operation of the compliance governance processes, including control ownership, compliance monitoring, issue tracking, and exception management, to maintain sustained audit readiness and control effectiveness.
• Identify opportunities to mature the compliance program through automation, continuous monitoring, improved evidence practices, and scalable audit readiness processes.
• Lead the certification program for ISO 27001, end‑to‑end from scoping through audit closure.
• Arrange penetration and vulnerability testing by identifying and negotiating with vendors, scheduling testing, and following up on results.
• Protect and maintain any highly sensitive, confidential, privileged, financial, or proprietary information that Latham & Watkins retains.

We’d love to hear from you if you:

• Exhibit the ability to communicate effectively and collaboratively with clients, vendors, and colleagues at all organizational levels.
• Demonstrate experience managing client security due diligence activities and responding to security questionnaires and related inquiries.
• Possess the ability to communicate technical concepts effectively, both verbally and in writing, and translate technical risks into business‑focused language for non‑technical audiences.

And have:

• A bachelor’s degree or Diploma of Higher Education, preferably in Information Systems, Computer Science, Engineering, or a related field.
• Relevant security and audit certifications (e.g., CISA, CISSP, CISM).
• A minimum of ten (10) years of experience in GRC, technology risk, compliance, audit/cybersecurity assurance, security governance, and/or operational resilience, and at least two (2) years in a leadership role.
• A minimum of two (2) years of experience applying project management concepts.
• Experience working in a law practice office.

Benefits & Additional Information

Successful candidates will receive an outstanding career opportunity and a generous total compensation package with bonuses awarded in recognition of both individual and firm performance. Eligible employees can participate in Latham’s comprehensive benefit program, which includes:

• Healthcare, life and disability insurance
• Generous 401(k) plan
• At least 11 paid holidays per year, and a PTO program that accrues 23 days during the first year of employment and grows with tenure
• Well‑being programs such as mental health services, mindfulness, and medical resources
• Professional development programs
• Employee discounts
• Affinity groups, networks, and coalitions for lawyers and staff

Latham & Watkins is an equal opportunity employer. The firm prohibits discrimination against any employee or applicant on the basis of race, color, religion, sex, age, national origin, sexual orientation, gender identity, veteran status, gender expression, marital status, or any other characteristic protected by applicable law. Latham & Watkins LLP will consider qualified applicants with criminal histories in a manner consistent with the City of Los Angeles Fair Chance Initiative for Hiring Ordinance.

Pay Range

USD $195,000.00 - USD $215,000.00 per year.