Enterprise Security Compliance Lead
Latham Watkins · Los Angeles, CA, US
About this role
**Enterprise Security Compliance Lead** **About Latham & Watkins** Latham & Watkins is one of the world’s leading global law firms advising the businesses and institutions that drive the global economy. With a focus on innovation and the future, we empower you to build an incredible career in a supportive culture. **About the Role** The Enterprise Security Compliance Lead is part of Latham’s Global Security and Risk Management team. You will coordinate client and vendor security audits and other security compliance needs, including **ISO 27001 assessments**, **penetration test remediation**, and **client responses**. You will also lead assigned client security reviews from intake through closure by: - Identifying internal stakeholders based on the request (e.g., security survey, audit, review) - Assembling relevant documentation - Completing required forms and questionnaires for Latham clients **Location & Work Model** - Global Services Office in **downtown Los Angeles** - May be eligible for a **flexible schedule** with **hybrid and in-office** presence --- **Key Responsibilities** - Maintain relationships with third-party audit services that audit firm vendors or evaluate the firm (e.g., ISO 27001 assessors, independent consultants) - Act as a project manager to ensure success of **ISO 27001**, **client and vendor audits**, and other assessments - Identify internal stakeholders, establish schedules, coordinate to meet deadlines - Assemble documentation, complete responses, and track follow-up - Support compliance activities related to **penetration testing** and **vulnerability testing** - Identify critical systems, external testing requirements and frequency - Coordinate with Security Operations and ensure remediation follow-up meets required SLAs - Coordinate team activities and reviews for consistency and quality - Create reports and presentations for senior management - Protect highly sensitive, confidential, privileged, financial, and/or proprietary information --- **Qualifications** We’d love to hear from you if you: - Understand business security practices and procedures - Have knowledge of information security technologies - Demonstrate knowledge of communication protocols and encryption techniques/tools **Required / Preferred Experience** - Bachelor’s degree or equivalent; **minimum 5+ years** Security and Technology experience may be considered in lieu of a degree - Preferably a bachelor’s degree in Information Systems, Computer Science, Engineering, or related field - Recognized security certifications (e.g., **CISA, CRISC, CDPSE, CISSP**) preferred - Minimum **5+ years** in IT audit or IT risk management - Minimum **3+ years** performing security assessments, IT vendor risk assessments, and vulnerability management reviews - Minimum **2+ years** applying project management concepts --- **Benefits & Additional Information** - Generous total compensation package with bonuses - Healthcare, life and disability insurance - Generous **401(k)** plan - At least **11 paid holidays** + PTO (accrues **23 days** in the first year and grows with tenure) - Well-being programs (e.g., mental health services, mindfulness, medical resources, well-being events) - Professional development programs - Employee discounts - Affinity groups, networks, and coalitions Latham & Watkins is an **equal opportunity employer** and prohibits discrimination based on protected characteristics. The firm also considers qualified applicants
Listing freshness
CronJobs last confirmed this listing 59m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.