What are the responsibilities and job description for the Information Security Manager position at Kforce Technology Staffing?
Job Details
RESPONSIBILITIES:
Kforce has a client in Pittsburgh, PA that iis partnering with a local law firm that is seeking a Manager of Information Security to lead and enhance our firm's Information Security Management System (ISMS) and Privacy Information Management System (PIMS). This leadership role is responsible for overseeing security engineering, operations, incident response, and policy development.
Responsibilities:
* Lead and mentor the security team, fostering a high-performance environment
* Develop, maintain, and enforce security policies, procedures, and training across departments
* Manage ISO 27001/27701 lifecycle and liaise with consulting teams to ensure compliance
* Provide expert guidance on technical threats, risk mitigation, and security best practices
* Oversee vulnerability scanning, remediation programs, and security monitoring
* Establish security metrics and risk trend dashboards to track progress
* Manage relationships with security service providers and enhance their capabilities
* Assess new hardware and software for security risks and provide recommendations
* Develop and implement security awareness programs to educate employees on risks
* Collaborate with General Counsel on client security audits, RFPs, and compliance
* Maintain security controls to protect client data from unauthorized access and threats
* Ensure compliance through training, internal audits, and third-party security reviews
* Lead incident response efforts and serve as the primary contact for security incidents
* Continuously assess and improve the firm's risk management strategies
REQUIREMENTS:
* Bachelor's degree or equivalent experience
* 10 years of experience working in an information security-related field
* 5 years of experience managing a team of technical security engineers
*One or more of the following certifications strongly preferred: CISSP, CISM; matriculating candidates considered
* Strong understanding of various security frameworks; ISO27001/ISO27701 and SOC
* Working knowledge of EDR, Vulnerability Scanning, Firewall, Proxy, PAM/PIM, SIEM, and other security-related technologies
* Excellent listening skills and written and oral communication skills, including effective presentation skills
* Ability to relate to non-technical users in user-friendly language
* Ability to understand technical implications of security threats and prioritize risk
* Ability to manage multiple concurrent objectives or activities and effectively make judgments in prioritizing and time allocation in a high-pressure environment
* Ability to gauge one's strengths and limitations
* Ability to deal with changes and adapt to a changing environment
* Ability to maintain strict confidentiality of the firm's internal and personnel affairs
* Ability to work well with others, harness different skills and experience, and build a strong sense of team spirit
* Ability to work in a multi-office environment and willingness to travel to other offices
* Experience working in a law firm or professional services firm environment preferred
The firm offers outstanding benefits that include:
* Competitive salary and generous Paid Time Off
* Hybrid work schedules
* Paid Holidays, including a floating holiday
* WorkWell wellness program, including free use of the Calm App
* Free use of building gym
* Caregiving assistance with Bright Horizons (child, elder, and pet care!)
* Access to a firm-wide emergency assistance fund
* Free full access to LinkedIn Learning
* Insurance - Medical, Dental, Vision
* 401K program
The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.
We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.
Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.
This job is not eligible for bonuses, incentives or commissions.
Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.
By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.
Kforce has a client in Pittsburgh, PA that iis partnering with a local law firm that is seeking a Manager of Information Security to lead and enhance our firm's Information Security Management System (ISMS) and Privacy Information Management System (PIMS). This leadership role is responsible for overseeing security engineering, operations, incident response, and policy development.
Responsibilities:
* Lead and mentor the security team, fostering a high-performance environment
* Develop, maintain, and enforce security policies, procedures, and training across departments
* Manage ISO 27001/27701 lifecycle and liaise with consulting teams to ensure compliance
* Provide expert guidance on technical threats, risk mitigation, and security best practices
* Oversee vulnerability scanning, remediation programs, and security monitoring
* Establish security metrics and risk trend dashboards to track progress
* Manage relationships with security service providers and enhance their capabilities
* Assess new hardware and software for security risks and provide recommendations
* Develop and implement security awareness programs to educate employees on risks
* Collaborate with General Counsel on client security audits, RFPs, and compliance
* Maintain security controls to protect client data from unauthorized access and threats
* Ensure compliance through training, internal audits, and third-party security reviews
* Lead incident response efforts and serve as the primary contact for security incidents
* Continuously assess and improve the firm's risk management strategies
REQUIREMENTS:
* Bachelor's degree or equivalent experience
* 10 years of experience working in an information security-related field
* 5 years of experience managing a team of technical security engineers
*One or more of the following certifications strongly preferred: CISSP, CISM; matriculating candidates considered
* Strong understanding of various security frameworks; ISO27001/ISO27701 and SOC
* Working knowledge of EDR, Vulnerability Scanning, Firewall, Proxy, PAM/PIM, SIEM, and other security-related technologies
* Excellent listening skills and written and oral communication skills, including effective presentation skills
* Ability to relate to non-technical users in user-friendly language
* Ability to understand technical implications of security threats and prioritize risk
* Ability to manage multiple concurrent objectives or activities and effectively make judgments in prioritizing and time allocation in a high-pressure environment
* Ability to gauge one's strengths and limitations
* Ability to deal with changes and adapt to a changing environment
* Ability to maintain strict confidentiality of the firm's internal and personnel affairs
* Ability to work well with others, harness different skills and experience, and build a strong sense of team spirit
* Ability to work in a multi-office environment and willingness to travel to other offices
* Experience working in a law firm or professional services firm environment preferred
The firm offers outstanding benefits that include:
* Competitive salary and generous Paid Time Off
* Hybrid work schedules
* Paid Holidays, including a floating holiday
* WorkWell wellness program, including free use of the Calm App
* Free use of building gym
* Caregiving assistance with Bright Horizons (child, elder, and pet care!)
* Access to a firm-wide emergency assistance fund
* Free full access to LinkedIn Learning
* Insurance - Medical, Dental, Vision
* 401K program
The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.
We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.
Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.
This job is not eligible for bonuses, incentives or commissions.
Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.
By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
