Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Sr. Director of Security & Information Governance role.
Rezi rewrites your resume against Jackson Lewis P.C.'s job description. Free.
Tailor your resume to this Sr. Director of Security & Information Governance role.
Rezi rewrites your resume against Jackson Lewis P.C.'s job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Sr. Director of Security & Information Governance posting at Jackson Lewis P.C. — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Sr. Director of Security & Information Governance posting at Jackson Lewis P.C. — free, in seconds.
About the Role
The Senior Director, Security & Information Governance provides strategic leadership for the Firm's enterprise technology security, information governance, records management, and technology risk programs. This role partners with executive leadership, attorneys, and business services teams to protect Firm and client information, strengthen cyber resilience, and oversee security technologies supporting emerging technologies like artificial intelligence.
Responsibilities
- Lead the Firm's technology risk, cybersecurity governance, and records programs, including identity and access management, data protection, cloud governance, incident response governance, vulnerability management, and oversight of enterprise technology controls.
- Provide oversight for security technologies and controls pertinent to AI-enabled platforms, data protection, monitoring, identity, endpoint, email, network, and cloud environments.
- Guide policy governance, network segmentation, secure access controls, and change management processes to reduce risk and support secure business operations.
- Oversee threat hunting, security monitoring, detection engineering, vulnerability prioritization, and incident readiness activities in partnership with firm business services departments and practice leadership.
- Develop and maintain enterprise security policies, standards, and procedures aligned with industry standards including NIST, ISO 27001, client outside counsel guidelines, and legal industry best practices.
- Direct the Firm's Information Governance and Records Management program, including records retention, legal holds, and information lifecycle management.
- Lead AI governance initiatives by establishing policies, risk assessments, technical controls, monitoring requirements, and security review processes that enable responsible, secure, and client-compliant use of generative AI and emerging technologies.
- Oversee enterprise security awareness and training through phishing simulations, role-based education, executive briefings, new hire onboarding, and ongoing awareness campaigns.
- Partner with Client Relationship teams to support security questionnaires, audits, due diligence reviews, and client meetings regarding the Firm's security posture.
- Develop firm key indicator reporting, risk indicators, and program metrics for the CIO and Firm leadership while driving continuous improvement.
- Collaborate closely with IT leadership, Risk Management, General Counsel, Records Management, Privacy, and Practice Groups to integrate technology governance into Firm operations and strategic initiatives.
- Drive technology and practice enhancements that increase general firm security posture.
- Perform other duties as assigned.
Requirements
- Bachelor's degree in Information Security, Information Technology, Computer Science, Business, or related discipline.
- 10+ years of progressive leadership in information security, information governance, technology risk, or enterprise security, preferably within an Am Law 200, professional services, or highly regulated environment.
- Demonstrated experience leading enterprise security governance, client security compliance, and cross-functional initiatives.
- Strong understanding of AI governance, information lifecycle management, privacy, and regulatory compliance.
Skills
- AI governance
- Information lifecycle management
- Privacy
- Regulatory compliance
- Identity and access management
- Data protection
- Cloud governance
- Incident response governance
- Vulnerability management
- Enterprise technology controls
- Threat hunting
- Security monitoring
- Detection engineering
- NIST
- ISO 27001
- Client outside counsel guidelines
- Legal industry best practices
- Records retention
- Legal holds
- Security awareness and training
- Phishing simulations
- Role-based education
- Executive briefings
- New hire onboarding
- Security questionnaires
- Audits
- Due diligence reviews
- Key indicator reporting
- Risk indicators
- Program metrics
Location
- Nationwide
Work Type
- Full-time
Experience Level
- Senior
- 10+ years
Education Level
- Bachelor's degree
- CISSP
- CISM
- CRISC
- IGP
- CIPM
- CPP
Salary/Compensations
- $250,000 - $335,000
- Eligible for annual bonuses
Benefits
- Medical, dental, vision, life and disability insurance
- 401(k) Retirement Plan
- Flexible Spending & Health Savings Account
- Firm-paid holidays, vacation, and sick time
- Employee assistance program
About the Company
- Focused on employment and labor law since 1958, Jackson Lewis P.C. has 1,000+ attorneys in major cities nationwide.
- The Firm helps employers develop proactive strategies, strong policies, and business-oriented solutions to cultivate high-functioning workforces.
- The Firm is ranked in the First Tier nationally in the category of Labor and Employment Litigation, as well as in both Employment Law and Labor Law on behalf of Management, in the U.S. News - Best Lawyers® “Best Law Firms”.
Equal Opportunity
- We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, national origin, gender, age, religion, disability, sexual orientation, veteran status, marital status or any other characteristics protected by law.