Information Security Manager

eNGINE

builds Technical Teams. We are a Solutions and Placement firm shaped by decades of interaction with Technical professionals. Our inspiration is continuous learning and engagement with the markets we serve, the talent we represent, and the teams we build. Our Consulting Workforce is encouraged to enjoy career fulfillment in the form of challenging projects, schedule flexibility, and paid training/certifications. Successful outcomes start and finish with

eNGINE

.

eNGINE

is hiring an experienced Manager, Information Security to join our security team and lead efforts to advance our organization's security posture. In this role, you will manage and enhance our network, system, identity, and cloud security capabilities. You will collaborate closely with IT teams to oversee security governance, risk management, compliance, and operations across the organization.

Key Responsibilities:

• Establish and maintain security governance frameworks, including policies, processes, procedures, and standards
• Lead risk management initiatives, including threat intelligence, risk assessment, and mitigation planning
• Oversee compliance programs, including ISO 27001, PCI-DSS, and client assurance audits and questionnaires
• Manage security-related budgets, vendor relationships, and managed security service providers
• Provide security awareness training and advisory support to IT, leadership, and practice groups on emerging threats and best practices
• Conduct design and architecture reviews across network, system, application, identity, and cloud infrastructure
• Direct continual monitoring, testing, and audit lifecycle management, including remediation tracking
• Lead detection and response efforts, including log aggregation, correlation, analysis, and incident response
• Oversee security operations technologies, including firewalls, network segmentation, vulnerability management, EDR/NGAV, SIEM, and email security
• Coordinate and prioritize security projects and continual improvement initiatives

Qualifications:

• Bachelor's degree or equivalent, with a minimum of 5 years of security-related experience
• 10\+ years of professional experience in information technology
• Strong background in IT operations, with related network, systems, or development experience
• 3\+ years of experience managing technical security engineering teams
• In-depth knowledge of security threats affecting systems, identities, and cloud environments
• Direct experience implementing and maintaining ISO 27001 and ISO 27701
• Proven ability to communicate technical risk to non-technical stakeholders
• Strong organizational skills, with the ability to manage competing priorities in a dynamic environment
• Demonstrated commitment to confidentiality regarding sensitive Firm and personnel information
• Excellent interpersonal skills, with a track record of building collaborative, high-performing teams
• Willingness to travel to other office locations as required

Preferred Qualifications:

• Professional certifications such as CISSP, CISM, CEH, or CIPP (candidates in progress toward certification are encouraged to apply)
• Prior experience within a law firm or professional services environment

No C2C, relocation, referral, or sponsorship candidates for this role.

For finer details on how eNGINE can impact your career, apply today!