Sr. Director of Security & Information Governance

Jackson Lewis P.C.; Atlanta (GA); On-site; USD 250,000 - 335,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) retirement plan

Flexible Spending & Health Savings

Paid holidays and vacation

Employee assistance program

Job summary

Jackson Lewis P.C. is seeking a Senior Director, Security & Information Governance to provide strategic leadership for enterprise technology security, information governance, records management, and technology risk programs.

The role partners with executive leadership to protect firm and client information and enable secure adoption of AI and emerging technologies. Reporting to the CIO, you will guide policy, governance, and incident readiness across risk domains, manage security awareness, and

Qualifications

• Bachelor's degree in Information Security, IT, CS, Business or related field.
• 10+ years leading information security, governance, risk, or enterprise security.
• Experience with enterprise security governance and client security compliance.
• Strong knowledge of AI governance, privacy, and regulatory requirements.
• Professional certifications such as CISSP, CISM, CRISC preferred.

Responsibilities

• Lead the Firm's technology risk, cybersecurity governance, and records programs.
• Provide oversight for security technologies across AI, data protection, identity and cloud.
• Guide policy governance, network segmentation, access controls, and change management.
• Oversee threat hunting, monitoring, and incident readiness activities.
• Develop and maintain enterprise security policies and standards (NIST, ISO 27001).
• Direct Information Governance and Records Management; manage retention and holds.
• Lead AI governance initiatives with policies, risk assessments, and controls.
• Oversee security awareness training and phishing simulations.
• Collaborate with clients and partners on security questionnaires and audits.
• Develop KPI reporting for CIO and leadership; drive continuous improvement.

Skills

Security leadership

AI governance

Regulatory compliance

Cross-functional collaboration

Education

Bachelor's degree in Information Security or related field

Job description

Focused on employment and labor law since 1958, Jackson Lewis P.C.’s 1,000+ attorneys located in major cities nationwide consistently identify and respond to new ways workplace law intersects business. We help employers develop proactive strategies, strong policies and business-oriented solutions to cultivate high-functioning workforces that are engaged and stable, and share our clients’ goals to emphasize belonging and respect for the contributions of every employee.

The Firm is ranked in the First Tier nationally in the category of Labor and Employment Litigation, as well as in both Employment Law and Labor Law on behalf of Management, in the U.S. News - Best Lawyers® “Best Law Firms”.

Position Summary

Reporting to the Chief Information Officer, the Senior Director, Security & Information Governance provides strategic leadership for the Firm's enterprise technology security, information governance, records management, and technology risk programs. The highly visible, and collaborative role partners with executive leadership, attorneys, and business services teams to protect Firm and client information, strengthen cyber resilience, oversee security technologies that support secure adoption of emerging technologies—including artificial intelligence. The Senior Director serves as a trusted advisor to Firm leadership, aligning security initiatives, security architecture, and capabilities with business strategy and client service.

Key Responsibilities

• Lead the Firm's technology risk, cybersecurity governance, and records programs, including identity and access management, data protection, cloud governance, incident response governance, vulnerability management, and oversight of enterprise technology controls.
• Provide oversight for security technologies and controls that are pertinent to AI-enabled platforms, data protection, monitoring, identity, endpoint, email, network, and cloud environments.
• Guide policy governance, network segmentation, secure access controls, and change management processes to reduce risk and support secure business operations.
• Oversee threat hunting, security monitoring, detection engineering, vulnerability prioritization, and incident readiness activities in partnership with firm business services departments, and practice leadership.
• Develop and maintain enterprise security policies, standards, and procedures aligned with industry standards including, but not limited to, NIST, ISO 27001, client outside counsel guidelines, and legal industry best practices.
• Direct the Firm's Information Governance and Records Management program, including records retention, legal holds, and information lifecycle management.
• Lead AI governance initiatives by establishing policies, risk assessments, technical controls, monitoring requirements, and security review processes that enable responsible, secure, and client-compliant use of generative AI and emerging technologies.
• Oversee enterprise security awareness and training through phishing simulations, role-based education, executive briefings, new hire onboarding, and ongoing awareness campaigns that strengthen the Firm's security culture.
• Partner with Client Relationship teams to support security questionnaires, audits, due diligence reviews, and client meetings regarding the Firm's security posture.
• Develop firm key indicator reporting, risk indicators, and program metrics for the CIO and Firm leadership while driving continuous improvement across security and governance programs.
• Collaborate closely with IT leadership, Risk Management, General Counsel, Records Management, Privacy, and Practice Groups to integrate technology governance into Firm operations and strategic initiatives.
• Drive technology, and practice enhancements that increase general firm security posture.
• Perform other duties as assigned.

Qualifications

• Bachelor's degree in Information Security, Information Technology, Computer Science, Business, or related discipline.
• 10+ years of progressive leadership in information security, information governance, technology risk, or enterprise security, preferably within an Am Law 200, professional services, or highly regulated environment.
• Demonstrated experience leading enterprise security governance, client security compliance, and cross-functional initiatives.
• Strong understanding of AI governance, information lifecycle management, privacy, and regulatory compliance.
• Professional certifications such as CISSP, CISM, CRISC, IGP, CIPM, or CPP are preferred.

For New York, California and Illinois, the expected salary range for this position is between $250,000 and $335,000. This position is also eligible for annual bonuses. The actual compensation will be determined based on experience and other factors permitted by law.

Jackson Lewis offers a competitive benefits package that includes:

• medical, dental, vision, life and disability insurance
• 401(k) Retirement Plan
• Flexible Spending & Health Savings Account
• firm-paid holidays, vacation, and sick time
• Employee assistance program and other benefits

We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, national origin, gender, age, religion, disability, sexual orientation, veteran status, marital status or any other characteristics protected by law.