InfoSec Program Manager — Governance, Cloud & Risk

Buchanan Ingersoll & Rooney Pc; Pittsburgh (Allegheny County); On-site; USD 120,000 - 160,000; Full time

Job summary

Buchanan Ingersoll & Rooney Pc is seeking a Manager, Information Security to lead the security program across network, systems, identity, and cloud domains. You will drive governance, risk, and compliance while coordinating with IT teams and firm leadership to strengthen security posture.

This role requires heavy collaboration, strong technical expertise, and the ability to communicate risk to non-technical stakeholders. Travel to other offices may be required as part of this senior position.

Qualifications

• Bachelor’s degree or equivalent with at least 5 years of security-related experience.
• 10+ years in an IT-related field with strong operational background.
• 3+ years of experience managing a team of security engineers.
• Direct experience implementing ISO 27001 and 27701.
• Strong knowledge of security threats involving systems, identities, and cloud services.
• Willingness to travel to other offices as required.
• Certifications CISSP, CISM, CEH, CIPP highly desired.

Responsibilities

• Oversee security governance, including policy, process, and standards.
• Lead risk management activities: threat intel, risk assessments, mitigation planning.
• Manage compliance with ISO 27001/27701 and client assurance audits.
• Direct security operations: IAM, network, cloud, EDR, SIEM, and incident response.
• Budget, vendor management, and coordinating security projects.
• Liaise with IT leadership and practice groups on threats and controls.
• Provide security training and promote best practices across the firm.

Skills

Security governance

Risk management

Compliance management

Cloud security

Team leadership

Incident response

Network security

Security monitoring

Education

Bachelor’s degree or equivalent

Tools

CISSP

CISM

CEH

CIPP

Job description

Buchanan Ingersoll & Rooney Pc is seeking a Manager, Information Security to lead the security program across network, systems, identity, and cloud domains. You will drive governance, risk, and compliance while coordinating with IT teams and firm leadership to strengthen security posture.

This role requires heavy collaboration, strong technical expertise, and the ability to communicate risk to non-technical stakeholders. Travel to other offices may be required as part of this senior position.