Senior Security Compliance & GRC Manager

Latham & Watkins LLP; Lancaster (CA); Hybrid; USD 195,000 - 215,000; Full time

Benefits offered by this job

Healthcare, life and disability保险

401k plan

11+ holidays + 23 days PTO

Well-being programs

Professional development

Employee discounts

Affinity groups and networks

Job summary

Latham & Watkins LLP seeks an Enterprise Security Compliance Manager for its Global Security and Risk Management team in downtown Los Angeles, with a hybrid/flexible schedule. You will lead security compliance, respond to client questionnaires, and coordinate governance processes with stakeholders.

The role requires a security-leaning background, strong communication, relevant certifications, and a track record in governance and audit readiness within a law firm or complex organization.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Engineering, or related field.
• Security certifications such as CISA, CISSP, CISM preferred.
• 10+ years in GRC, technology risk, compliance, audit/cybersecurity assurance, governance, or operational resilience.
• Minimum 2 years in a leadership role.
• Minimum 2 years applying project management concepts.
• Experience in a law practice office is a plus.

Responsibilities

• Manage security compliance activities and respond to client security questionnaires, assessments, and RFPs.
• Coordinate with stakeholders, prepare documentation, draft responses, validate controls, and explain security architecture to assessors.
• Lead governance processes including control ownership, monitoring, issue tracking, and exception management.
• Identify opportunities to mature the program through automation and continuous monitoring.
• Oversee ISO 27001 certification end‑to‑end from scoping to audit closure.

Skills

Effective communication

Security due diligence experience

Translate technical risks to business

Leadership

Education

Bachelor's degree in Information Systems/CS/Engineering or related field

Tools

GRC tools

Job description

Latham & Watkins LLP seeks an Enterprise Security Compliance Manager for its Global Security and Risk Management team in downtown Los Angeles, with a hybrid/flexible schedule. You will lead security compliance, respond to client questionnaires, and coordinate governance processes with stakeholders.

The role requires a security-leaning background, strong communication, relevant certifications, and a track record in governance and audit readiness within a law firm or complex organization.