Senior Information Security Manager

Buchanan, Ingersoll & Rooney; Pittsburgh (Allegheny County); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Hybrid work schedules

Paid time off

Holidays and wellness programs

Gym access and employee benefits

Emergency assistance fund

Job summary

Buchanan Ingersoll & Rooney is a national law firm delivering industry-leading legal, business, regulatory and government relations counsel to clients across regions. The Manager, Information Security, will lead a security program focused on governance, risk, compliance, and operations, coordinating with IT teams and Firm leadership to strengthen network, system, identity and cloud security.

Responsibilities include policy development, threat monitoring, incident response and ensuring audits

Qualifications

• Bachelor’s degree or equivalent with at least 5 years of security-related experience.
• 10+ years of experience in an information technology related field.
• 3+ years of experience managing a team of technical security engineers.
• Direct experience implementing and maintaining ISO 27001 and 27701.

Responsibilities

• Security governance, including policy, process, procedure, and standards.
• Risk management, including threat intelligence, risk assessment, analysis, and mitigation planning.
• Compliance management, including ISO 27001, PCI-DSS, and client assurance audit and questionnaires.
• Resource management, including budget, vendor, and managed security service providers.
• Security awareness and training, including advising IT and Firm leadership on threats and controls.
• Design and architecture review across network, systems, identity, and cloud infrastructure.
• Continual monitoring, testing, and audit lifecycle management and remediation tracking.
• Detection and response, including log aggregation, correlation, analysis, incident response, and recovery.

Skills

Security governance

Risk management

Compliance

Team leadership

Cloud security

Networking and systems

ISO 27001

ISO 27701

Incident response

Vendor management

Education

Bachelor’s degree or equivalent

Tools

SIEM

EDR/NGAV

Firewall

Job description

Buchanan Ingersoll & Rooney is a national law firm delivering industry-leading legal, business, regulatory and government relations counsel to clients across regions. The Manager, Information Security, will lead a security program focused on governance, risk, compliance, and operations, coordinating with IT teams and Firm leadership to strengthen network, system, identity and cloud security.

Responsibilities include policy development, threat monitoring, incident response and ensuring audits