Hybrid Enterprise Security & Compliance Lead

Latham & Watkins; Los Angeles (CA); Hybrid; USD 160,000 - 180,000; Full time

Benefits offered by this job

Healthcare & disability

401k plan

Paid holidays

PTO accrual

Well-being programs

Professional development

Employee discounts

Affinity groups

Job summary

Latham & Watkins seeks an Enterprise Security Compliance Lead for its Global Services Office in downtown Los Angeles. You will coordinate client and vendor audits, manage ISO 27001 assessments, and drive remediation and responses from intake to closure, partnering with security and risk teams.

The role blends project management, documentation, and stakeholder coordination to ensure timely and accurate audits, secure data handling, and clear reporting to senior management.

Qualifications

• Bachelor's degree or equivalent; 5+ years security/tech experience may substitute for degree
• Bachelor’s in Information Systems, CS, Engineering or related field (preferred)
• Security certifications (CISA, CRISC, CDPSE, CISSP) preferred
• 5+ years IT audit or IT risk management experience
• 3+ years security assessments, IT vendor risk assessments, vulnerability management reviews
• 2+ years project management experience

Responsibilities

• Coordinate client and vendor security audits and other assessments
• Lead ISO 27001 activities, survey responses, and documentation
• Assemble relevant documentation and manage intake through closure
• Create reports and presentations for senior management
• Protect and manage highly sensitive company information

Skills

Security audits

Project management

IT risk management

Vendor risk assessments

Penetration testing

Information security

Stakeholder coordination

Education

Bachelor's degree

Information Systems

Computer Science

Job description

Latham & Watkins seeks an Enterprise Security Compliance Lead for its Global Services Office in downtown Los Angeles. You will coordinate client and vendor audits, manage ISO 27001 assessments, and drive remediation and responses from intake to closure, partnering with security and risk teams.

The role blends project management, documentation, and stakeholder coordination to ensure timely and accurate audits, secure data handling, and clear reporting to senior management.