Hybrid Information Security Manager: Incident Response & Ops

Saltu Staffing; United States; Hybride; USD 140 000 - 180 000; Plein temps

Avantages offerts par ce poste

Comprehensive benefits package

Résumé du poste

Saltu Staffing partners with a leading AmLaw 100 law firm to hire an Information Security Manager in Dallas. You will lead security operations, incident response, vulnerability management, and client security assurance while aligning with Legal, Risk, Privacy and IT.

The role oversees a team, manages third-party security risk, and maintains policy framework under NIST/ISO 27001. Hybrid work, full-time, with comprehensive benefits.

Qualifications

• Bachelor's degree in Information Security, Information Technology, Computer Science or a related field required.
• 8+ years of information security experience, including 3+ years leading a security operations or information security team.
• 3+ years of information security experience in an AmLaw 200 law firm environment strongly preferred.
• Hands-on incident response leadership, including coordination with Legal, Risk and executive stakeholders.
• Experience managing vulnerability management, SIEM/security monitoring, endpoint protection and managed security service providers.
• Working knowledge of NIST CSF, ISO 27001 and privacy and regulatory requirements.
• Experience responding to client security assessments, audits or outside counsel guidelines; law firm or professional services experience strongly preferred.
• Experience conducting third-party and vendor security risk assessments, including emerging AI technologies.
• Experience with Microsoft 365 security (Defender, Sentinel, Purview, Entra ID) preferred.
• Strong written and verbal communication skills, with the ability to explain cyber risk to attorneys and executives.

Responsabilités

• Lead, mentor and develop a team of information security professionals; set priorities, standardize practices and support professional development and industry certifications.
• Manage daily security operations, including threat detection, alert triage, escalation and remediation, in partnership with the firm's managed security service provider.
• Lead cybersecurity incident response from investigation and containment through remediation, recovery and stakeholder communications; maintain and test the incident response plan.
• Run the firmwide vulnerability management program, including scanning, risk-based prioritization, remediation tracking and reporting.
• Manage the client security assurance program, including responses to outside counsel guidelines, client security assessments and audit inquiries, and remediation of identified risks.
• Conduct third-party security governance, including technology and AI risk assessments, security reviews of vendor contracts, and oversight of managed security services.
• Maintain the firm's information security policy framework in alignment with NIST, ISO 27001, and legal, regulatory, contractual and client obligations.
• Integrate security into firm initiatives in collaboration with Legal, Risk, Privacy, Information Governance and IT.
• Manage threat intelligence activities and translate emerging threats into actionable protections.
• Run the security awareness and phishing simulation program for attorneys and staff.
• Evaluate, implement and manage security technologies, and support budget planning and vendor management.
• Prepare security metrics, risk reporting and recommendations for the Director of Information Security and firm leadership.

Connaissances

Team leadership

Communication

Security operations

Incident response

Formation

Bachelor's degree in Information Security/IT/CS

Outils

Microsoft 365 Security

Microsoft Defender

Microsoft Sentinel

Microsoft Purview

Entra ID

Description du poste

Saltu Staffing partners with a leading AmLaw 100 law firm to hire an Information Security Manager in Dallas. You will lead security operations, incident response, vulnerability management, and client security assurance while aligning with Legal, Risk, Privacy and IT.

The role oversees a team, manages third-party security risk, and maintains policy framework under NIST/ISO 27001. Hybrid work, full-time, with comprehensive benefits.