What are the responsibilities and job description for the Information Security Governance & Compliance Manager position at Messerli & Kramer?
Job Type
Full-time
Description
Founded in 1965, Messerli Kramer is a well-established full service law firm based in Minneapolis, Minnesota, with other offices in St. Paul and Plymouth, along with a satellite office in Milwaukee. We have a well- earned reputation within the business community of providing sound, reasoned and comprehensive legal advice. With an emphasis on building lasting relationships with our clients, our professionals take the time to listen and understand their legal issues within the larger framework of their business as a whole. Known for our dedication and responsiveness, our attorneys and staff are focused on finding pragmatic solutions and producing remarkable results for our clients.
Messerli Kramer serves individuals and businesses through three unique, yet complementary divisions. We represent a variety of clients across a series of practice groups : Banking and Finance, Business Litigation, Corporate and Estate Planning, Commercial Real Estate, Family Law, Consumer Collections & Creditor's Remedies and Government Relations.
POSITION SUMMARY
This role is onsite / hybrid in downtown Minneapolis.
The Information Security Governance & Compliance Manager assists the Chief Information Security Officer in overseeing the Firm's Information Security and Governance program and is responsible for risk-based activities including, designing, developing and implementing information security policies, procedures, and standards and monitoring the overall health of the information security program. This role also ensures the firm complies with internal policies and external regulations based on our vendor and client requirements. This individual will be assessing and mitigating risks, monitoring compliance with laws and regulations, and developing strategies to enhance firm governance practices. In addition, this position assesses the information security program compliance with policies, procedures, client frameworks, and industry standards; and assists with overall compliance with industry and customer information security requirements such as GLBA(Gramm-Leach Bliley Act), and PCI(Payment Card industry).
ESSENTIAL FUNCTIONS
- Perform security assessments to determine effectiveness of implemented security controls.
- Assess the security posture of systems throughout their life cycle
- Lead efforts to counter security breaches and anticipate and reduce future security alerts, incidents, and disasters.
- Assist management in identifying risks and actions to monitor, remediate & report via the risk register.
- Lead and review third party and supplier risk management programs and assessments based on each firm division requirements.
- Implement and support Plymouth, St. Paul and Minneapolis security compliance mandates from client contractual agreements.
- Write reports and provide insights on the efficacy of the current security policies, incident responses, disaster recovery plans, and other security-related information.
- Assist with Insurance renewal applications specific to required security controls and questionnaires
- Manage and facilitate the IT team's responses to security questionnaire and security audit reviews received from client oversight programs.
- Manage and monitor internal self-audit program
- Monitor and manage response to the vulnerability management program
- Monitor and enforce information security policies
- Assist with outside audit and certification activities including management of security questionnaires
- Advise on content section in established computer security education and awareness programs and design and conduct training ad hoc computer security education
- Apply contemporary business principles integral to a high-tech organization
- Assist with IT vendor management and partner with vendor IT360 and other managed services partners
- Assist IT Management to identify security initiatives and the security budgeting process
- Solve business and technology challenges
Requirements
POSITION QUALIFICATIONS
SKILLS & ABILITIES
EXPERIENCE
Must possess 3 years' experience in information security policy, security authorization, audit, and technical practice.
SALARY
Base compensation will vary based on level of experience. Compensation range $100,000-160,000.00. Associate Attorneys are also eligible for monthly and / or annual bonus incentives based on performance
EDUCATION
B.S. or equivalent in Computer Science, Information Science & Technology, or related field. CISSP, CISA, or CISM preferred. Other information security certifications highly desired.
PHYSICAL DEMANDS
None.
WORK ENVIRONMENT Office suite and remote environment - this position may travel between three locations, Minneapolis, St. Paul, and Plymouth MN, primarily stationed in Minneapolis. Messerli & Kramer currently offers a hybrid work environment where a mix of office and work from home hours are available.
BENEFITS
Messerli Kramer is fully committed to equality of opportunity in all aspects of employment. It is the policy of Messerli Kramer to provide equal employment opportunity to all employees and applicants without regard to race, color, religion, national or ethnic origin, military status, veteran status, age, gender, gender identity or expression, sexual orientation, genetic information, physical or mental disability or any other protected status. Reasonable accommodations can be made to enable individuals with disabilities to perform the essential functions.
The company has reviewed this job description to ensure that essential functions and basic duties have been included. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate.
Salary Description
90,000-160,000.00
Salary : $100,000 - $160,000
