Security Compliance Lead — ISO 27001 & Audit Programs

Careers; Los Angeles (CA); Hybrid; USD 160,000 - 180,000; Full time

Benefits offered by this job

Healthcare

401k

Paid holidays

PTO

Well-being programs

Professional development

Job summary

Latham & Watkins is seeking an Enterprise Security Compliance Lead to coordinate client and vendor security audits, ISO 27001 assessments, and remediation efforts from intake to close. Based in the Global Services Office in downtown Los Angeles, the role supports hybrid work with in-office presence.

The candidate will manage audits, coordinate internal stakeholders, and ensure documentation and responses meet client requirements while protecting sensitive information.

Qualifications

• Bachelor's degree (or equivalent) in Information Systems, Computer Science, Engineering or related field; 5+ years in Security/Technology may substitute
• Recognized security certifications (e.g., CISA, CRISC, CDPSE, CISSP) preferred
• Minimum 5 years IT audit or IT risk management experience
• Minimum 3 years security assessments, vendor risk assessments, vulnerability management reviews
• Minimum 2 years of project management experience

Responsibilities

• Maintain relationships with third‑party audit services auditing firm vendors and clients
• Project-manage ISO 27001, client and vendor audits, and related assessments
• Coordinate with internal stakeholders, establish schedules, assemble documentation, complete responses
• Support penetration testing and vulnerability testing activities and remediation follow‑ups
• Coordinate team activities and deliver reports/presentations for senior management
• Protect highly sensitive, confidential, and proprietary information

Skills

Security concepts

Client security audits

Vendor risk management

Project management

Encryption techniques

Communication protocols

Education

Bachelor's degree in Information Systems

Bachelor's degree in Computer Science

CISA

CRISC

CISSP

Tools

ISO 27001

Penetration testing

Vulnerability management

Job description

Latham & Watkins is seeking an Enterprise Security Compliance Lead to coordinate client and vendor security audits, ISO 27001 assessments, and remediation efforts from intake to close. Based in the Global Services Office in downtown Los Angeles, the role supports hybrid work with in-office presence.

The candidate will manage audits, coordinate internal stakeholders, and ensure documentation and responses meet client requirements while protecting sensitive information.