Information Security Manager

Saltu Staffing; United States; Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Comprehensive benefits package

Job summary

Saltu Staffing partners with a leading AmLaw 100 law firm to hire an Information Security Manager in Dallas. You will lead security operations, incident response, vulnerability management, and client security assurance while aligning with Legal, Risk, Privacy and IT.

The role oversees a team, manages third-party security risk, and maintains policy framework under NIST/ISO 27001. Hybrid work, full-time, with comprehensive benefits.

Qualifications

• Bachelor's degree in Information Security, Information Technology, Computer Science or a related field required.
• 8+ years of information security experience, including 3+ years leading a security operations or information security team.
• 3+ years of information security experience in an AmLaw 200 law firm environment strongly preferred.
• Hands-on incident response leadership, including coordination with Legal, Risk and executive stakeholders.
• Experience managing vulnerability management, SIEM/security monitoring, endpoint protection and managed security service providers.
• Working knowledge of NIST CSF, ISO 27001 and privacy and regulatory requirements.
• Experience responding to client security assessments, audits or outside counsel guidelines; law firm or professional services experience strongly preferred.
• Experience conducting third-party and vendor security risk assessments, including emerging AI technologies.
• Experience with Microsoft 365 security (Defender, Sentinel, Purview, Entra ID) preferred.
• Strong written and verbal communication skills, with the ability to explain cyber risk to attorneys and executives.

Responsibilities

• Lead, mentor and develop a team of information security professionals; set priorities, standardize practices and support professional development and industry certifications.
• Manage daily security operations, including threat detection, alert triage, escalation and remediation, in partnership with the firm's managed security service provider.
• Lead cybersecurity incident response from investigation and containment through remediation, recovery and stakeholder communications; maintain and test the incident response plan.
• Run the firmwide vulnerability management program, including scanning, risk-based prioritization, remediation tracking and reporting.
• Manage the client security assurance program, including responses to outside counsel guidelines, client security assessments and audit inquiries, and remediation of identified risks.
• Conduct third-party security governance, including technology and AI risk assessments, security reviews of vendor contracts, and oversight of managed security services.
• Maintain the firm's information security policy framework in alignment with NIST, ISO 27001, and legal, regulatory, contractual and client obligations.
• Integrate security into firm initiatives in collaboration with Legal, Risk, Privacy, Information Governance and IT.
• Manage threat intelligence activities and translate emerging threats into actionable protections.
• Run the security awareness and phishing simulation program for attorneys and staff.
• Evaluate, implement and manage security technologies, and support budget planning and vendor management.
• Prepare security metrics, risk reporting and recommendations for the Director of Information Security and firm leadership.

Skills

Team leadership

Communication

Security operations

Incident response

Education

Bachelor's degree in Information Security/IT/CS

Tools

Microsoft 365 Security

Microsoft Defender

Microsoft Sentinel

Microsoft Purview

Entra ID

Job description

Saltu is partnering with an AmLaw 100 law firm to find an Information Security Manager to lead the day-to-day operations of the firm's information security program. Reporting to the Director of Information Security, this role manages a team of security professionals. It oversees security operations, incident response, vulnerability management, third-party security risk and the firm's client security assurance program. The Information Security Manager partners closely with Legal, Risk, Privacy, Information Governance and IT to protect client and firm data while enabling the business. This is a full-time, exempt position based in Dallas, with excellent benefits.

Essential Duties and Responsibilities:

• Lead, mentor and develop a team of information security professionals; set priorities, standardize practices and support professional development and industry certifications.
• Manage daily security operations, including threat detection, alert triage, escalation and remediation, in partnership with the firm's managed security service provider.
• Lead cybersecurity incident response from investigation and containment through remediation, recovery and stakeholder communications; maintain and test the incident response plan.
• Run the firmwide vulnerability management program, including scanning, risk-based prioritization, remediation tracking and reporting.
• Manage the client security assurance program, including responses to outside counsel guidelines, client security assessments and audit inquiries, and remediation of identified risks.
• Conduct third-party security governance, including technology and AI risk assessments, security reviews of vendor contracts, and oversight of managed security services.
• Maintain the firm's information security policy framework in alignment with NIST, ISO 27001, and legal, regulatory, contractual and client obligations.
• Integrate security into firm initiatives in collaboration with Legal, Risk, Privacy, Information Governance and IT.
• Manage threat intelligence activities and translate emerging threats into actionable protections.
• Run the security awareness and phishing simulation program for attorneys and staff.
• Evaluate, implement and manage security technologies, and support budget planning and vendor management.
• Prepare security metrics, risk reporting and recommendations for the Director of Information Security and firm leadership.

Qualifications:

• Bachelor's degree in Information Security, Information Technology, Computer Science or a related field required.
• 8+ years of information security experience, including 3+ years leading a security operations or information security team.
• 3+ years of information security experience in an AmLaw 200 law firm environment strongly preferred.
• Hands-on incident response leadership, including coordination with Legal, Risk and executive stakeholders.
• Experience managing vulnerability management, SIEM/security monitoring, endpoint protection and managed security service providers.
• Working knowledge of NIST CSF, ISO 27001 and privacy and regulatory requirements.
• Experience responding to client security assessments, audits or outside counsel guidelines; law firm or professional services experience strongly preferred.
• Experience conducting third-party and vendor security risk assessments, including emerging AI technologies.
• Experience with Microsoft 365 security (Defender, Sentinel, Purview, Entra ID) preferred.
• Strong written and verbal communication skills, with the ability to explain cyber risk to attorneys and executives.

Preferred Certifications:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• GIAC certifications (e.g., GCIH, GSEC)
• ISO 27001 Lead Implementer or Lead Auditor

Physical Demands:

• Must be able to sit for extensive periods of time, either while using the telephone or computer.
• Must be able to work in a high-pressure environment with time restraints and frequent interruptions.

Working Condition and Environment:

• Work is normally performed in a typical office environment, which includes the ability to visit face-to-face and virtually with colleagues.
• Position is full-time and requires a five-day work week and standard business hours. Additional hours, including weekend and evening hours, may be required, including after-hours response to security incidents.
• Position may require some out-of-town travel, including weekends.
• Work arrangement: Hybrid

Our client offers a comprehensive benefits program designed to support the wellbeing of employees and their families.