We are seeking an experienced Information Security professional to take ownership of the security strategy for a law firm. This role blends hands-on technical leadership with executive-level program management, driving the protection of critical technology assets while enabling business growth.

Responsibilities:

• 
  

  Develop, maintain, and enhance the firm's cybersecurity program in alignment with organizational objectives and confidentiality requirements.

  
  


• 
  

  Define, implement, and enforce policies, standards, and best practices to secure IT systems, applications, and data.

  
  


• 
  

  Proactively evaluate security risks through assessments, penetration testing, and continuous monitoring, and recommend mitigation strategies.

  
  


• 
  

  Lead response efforts for security incidents, including investigation, containment, remedia...