Enterprise Security Compliance Manager

Enterprise Security Compliance Manager

The Enterprise Security Compliance Manager is an integral part of Latham's Global Security & Risk Management team. This role will be responsible for managing the firm's security compliance activities focused on third-party vendors, while overseeing the firm's vendor audit and third-party access review processes, including but not limited to cloud service providers, and engaging in a risk-based approach to determine the depth of each audit, leading the audit, working closely with the Contract Review, Information Governance, and other teams, and providing a recommendation to management based on the results. This role will be located in our Global Services Office in Downtown Los Angeles. Please note that this role may be eligible for a flexible working schedule that allows for a hybrid and in-office presence.

Responsibilities & Qualifications

Other key responsibilities include :

• Organizing and conducting meetings of the firm's Third Party Access Security Review Team, coordinating the assessment of vendors, and leveraging team members' expertise in the vendor review process
• Arranging third-party penetration tests and vulnerability testing by identifying and negotiating with vendors, scheduling testing, and following up on results delivery
• Reviewing firm contracts as part of the firm's contract review process to assess and recommend adjustments that serve to minimize security risk in firm agreements
• Supporting the client security review process on an overflow basis, from Intake through Closure, by identifying all necessary internal stakeholders based on the request (e.g., security survey, audit, review), assembling relevant and appropriate documentation, drafting responses, scheduling and leading calls / meetings, and communicating follow-up activities
• In coordination with the Information Security Officer, evaluating the results of internal and external system vulnerability scans, and arranging necessary internal follow-up to facilitate agreement regarding any recommended remediation items
• Tracking agreed security remediation efforts from vulnerability tests, etc., and with the support of the Information Security Office and others, ensuring successful disposition of each item
• Working to enhance the confidentiality, integrity, and availability of data at the firm, regardless of form
• Maintaining information security documentation and assisting in the development of security policies and procedures
• Serving as subject matter expert for information security principles and practices (especially as they pertain to vendors and cloud security) and promotes a culture of security throughout the firm
• Protecting and maintaining any highly sensitive, confidential, privileged, financial, and / or proprietary information that Latham & Watkins retains

We'd love to hear from you if you :

And have :

Benefits & Additional Information

Successful candidates will not only be provided with an outstanding career opportunity and welcoming environment, but will also be provided with a generous total compensation package with bonuses awarded in recognition of both individual and firm performance. Eligible employees can participate in Latham's comprehensive benefit program which includes :

Latham & Watkins is an equal opportunity employer. The Firm prohibits discrimination against any employee or applicant for employment on the basis of race (including, but not limited to, hair texture and protective hairstyles), color, religion, sex, age, national origin, sexual orientation, gender identity, veteran status (including veterans of the Vietnam era), gender expression, marital status, or any other characteristic or condition protected by applicable statute.

Latham & Watkins LLP will consider qualified applicants with criminal histories in a manner consistent with the City of Los Angeles Fair Chance Initiative for Hiring Ordinance (FCIHO)?. Please click the link below to review the Ordinance.

Please click here to review your rights under U.S. employment laws.

#MidSenior #LI-JN1

Pay Range

USD $190,000.00 - USD $210,000.00 / Yr.