Define and execute a Firm-wide cybersecurity strategy aligned with NIST CSF, NIST AI RMF 1.0, ISO 27001, and SOC 2 frameworks
Own and continuously mature the Firm's Information Security Management System (ISMS)
Lead ISO 27001 gap analysis and establish a roadmap toward certification
Develop, maintain, and enforce security policies, standards, procedures, and governance structures
Define and track key risk indicators (KRIs), metrics, and reporting frameworks
Serve as the Firm's executive owner of AI security and governance
Design and implement a scalable AI governance framework, including acceptable use standards, risk-tiering criteria, and data handling controls
Own the Firm's vendor risk management program, including intake, risk-tiering, assessment, and continuous monitoring
Own the Firm's SOC 2 Type II program, including control maintenance, evidence collection, and auditor engagement
Provide executive oversight of security architecture across Microsoft 365 and Azure

10+ years of progressive experience in information security, including leadership and program ownership roles
CISSP (required); CISM or equivalent considered
Demonstrated experience leading or scaling a security program; law firm or professional services preferred
Strong experience with cloud security, vendor risk, and compliance frameworks
Experience with SOC 2 programs and enterprise security tooling in Microsoft environments

medical, dental, and vision coverage
401(k) plan
additional benefits to help you prepare for retirement
free access to Employee Assistance Programs
other programs designed to help you and your family stay healthy, feel secure, and enjoy a positive work/life balance

Information Security Director – ISD

Key skills