Job DescriptionWe are seeking a Senior Manager, Security Operations to join the firm. The Senior Manager, Security Operations oversee's cyber security, forensics, incident response, and physical security operations for the firm. Responsibilities include implementing monitoring technologies, incident response systems, and a comprehensive security strategy. They convert business needs into technical specifications, ensuring firm and client data security while maintaining compliance standards. This role ensures security objectives are met within time and budget constraints. Additionally, the position identifies improvement areas within existing programmatic goals, ensuring optimal use of security technologies and robust operational effectiveness.
KEY RELATIONSHIPS
IT Leadership, Chief Officers, Department Directors, Directors of Administration, Office Administrators, General Counsel
ESSENTIAL DUTIES
• Implementing comprehensive strategies for network monitoring and intrusion detection analysis using defense tools like firewalls, intrusion detection/prevention systems, and host-based security systems.
• Performing log-based and endpoint-based threat detection to identify and safeguard against risks originating from various sources.
• Overseeing deployment of cloud-based detection to identify threats associated with cloud environments and firm-utilized services.
• Correlating activity across assets like endpoints, networks, and apps, as well as environments such as on-premises and cloud, to identify anomalous activity.
• Reviewing alerts and sensor data while documenting formal technical incident reports.
• Ensuring incident response support for network subscribers, including implementing containment and mitigation actions and coordinating forensic analysis when required.
• Supporting the creation of business continuity/disaster recovery plans, including conducting disaster recovery tests, publishing test results and addressing deficiencies
• Working with security information and event management (SIEM) to manage/tune the system, create/manage the detection content and actively watch for alerts
• Researching emerging threats and vulnerabilities to assist with identifying incidents.
• Conducting regular training sessions on intrusion detection, prevention systems, security incident response procedures, threat intelligence analysis, and log analysis within the team.
EXPERIENCE SKILLS REQUIRED
• Possess Bachelors degree OR equivalent experience in the computer science, information security, cybersecurity or other related fields
• Demonstrate expertise in DevSecOps security principles and industry best practices.
• Demonstrate experience in security automation and utilizing Generative AI to enhance security operations.
• Demonstrate the ability to build and sustain productive working relationships across every level of the firm.
• Demonstrate proficiency in Microsoft Office applications, including Word, Excel, PowerPoint, and SharePoint.
• Demonstrate experience working in multi-cloud environments, including platforms like Azure, AWS, and GCP.
• 10+ years experience in IT audit, enterprise risk management, penetration testing, red teaming, incident response and physical security operations
• 10+ years experience with regulatory compliance and information security frameworks such as ISO 27001, NIS 800-171
• Demonstrate expertise in leading remote teams including performance management, succession planning, and fostering employee growth and development.
Compensation Salary $148,000 - $296,000
The compensation salary for this position will be determined during the interview process and will vary based on multiple factors, including but not limited to prior experience, relevant expertise, current business needs, and market factors.
In accordance with the Los Angeles Fair Chance Ordinance, San Francisco Fair Chance Ordinance, and the California Fair Chance Act, qualified applicants for our Los Angeles and San Francisco offices with arrest and conviction records will be considered.
BENEFITSK&L Gates offers our personnel a comprehensive suite of benefits to help meet your needs now and in the future. Depending on your eligibility, options for full-time personnel include:
- Medical/Prescription Drug Coverage (including a Health Savings Account feature)
- Back-up Child/Elder Care and access to a caregiving concierge
- Pre-tax Commuting Benefits
- 401(k) Retirement Plan and Profit Sharing
- Business Travel Accident Insurance
- Short- and Long-term Disability Protection
- Life Insurance (including Basic, Supplemental, Spouse, Child, and Accidental Death and Dismemberment)
- Paid Time Off (25-30 days per year)
- Identity Protection/Restoration and Fraud Insurance
- Parental Leave (18 weeks of which 12 are paid; short-term disability may provide additional paid time off)
- Student loan refinancing options and access to a student loan concierge service
- Breast Milk Delivery and Lactation Support Services
- Flexible Spending Accounts
- Employees also may be eligible to receive bonuses and certain expense reimbursements
- Employee Assistance Program
- Professional Development and CLE Credit Opportunities
- Employee Referral Program
- Critical Illness Insurance
- Hybrid/Remote Work Opportunities
- Hospital Indemnity Insurance
- Perks including: Technology, Entertainment, and Travel Discount Programs
- All other benefits (such as leaves of absence) required by law
