serp_jobs.breadcrumb.workplace_remote Cyber security serp_jobs.h1.location_city

Cyber Security Compliance Manager - ISO 27001

This range is provided by Blue Bridge People. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

155,000.00 / yr - $175,000.00 / yr

Additional compensation types

Annual Bonus

This is a direct hire role that would sit 2-3 days a week in the client's Boston or Washington DC offices.

About the Role :

We are seeking an experienced Information Security Compliance Manager with a background in professional services or law firm environments to lead compliance initiatives and oversee security audits. This role requires extensive expertise in ISO 27001 audits and will be a key driver in ensuring the firm's security policies and risk management processes align with regulatory and client requirements. Working closely with the Director of Information Security , the selected candidate will play a strategic leadership role in safeguarding the firm's data and technology infrastructure while maintaining compliance with client-mandated security standards.

Key Responsibilities :

• Approve risk decisions and policy exceptions in coordination with the Director of Information Security , ensuring alignment with the firm's security strategy.
• Supervise the Cyber Security Compliance Analyst , guiding risk assessments, vulnerability management, security process audits, and compliance reporting.
• Lead and oversee ISO 27001 audits , including internal assessments and firm-wide compliance efforts.
• Manage client-driven cybersecurity audits and ensure adherence to security-related Outside Counsel Guidelines (OCGs)
• Support information security governance within system development, covering production acceptance, change management, user administration, security logging, and secure workflow processes.
• Administer the firm's application security review process , ensuring new technology services comply with security policies.
• Monitor and enhance security incident response processes, prioritizing and addressing security threats effectively.
• Lead enterprise-wide security projects , implementing best-in-class security protections to safeguard firm and client data.
• Act as a trusted cybersecurity advisor , fostering a culture of security awareness across the firm.
• Provide professional client service , ensuring internal and external stakeholders receive clear, proactive communication regarding security policies and initiatives.
• Take on additional responsibilities as needed to support the firm's security and compliance objectives.

What You Will Bring :

Required Qualifications :

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

Industries

Business Consulting and Services

J-18808-Ljbffr