Sr. Director of Security & Information Governance

Focused on employment and labor law since 1958, Jackson Lewis P.C.’s 1,000+ attorneys located in major cities nationwide consistently identify and respond to new ways workplace law intersects business. We help employers develop proactive strategies, strong policies and business-oriented solutions to cultivate high-functioning workforces that are engaged and stable, and share our clients’ goals to emphasize belonging and respect for the contributions of every employee.

The Firm is ranked in the First Tier nationally in the category of Labor and Employment Litigation, as well as in both Employment Law and Labor Law on behalf of Management, in the U.S. News - Best Lawyers® “Best Law Firms”. 

Position Summary

Reporting to the Chief Information Officer, the Senior Director, Security & Information Governance provides strategic leadership for the Firm's enterprise technology security, information governance, records management, and technology risk programs. The highly visible, and collaborative role partners with executive leadership, attorneys, and business services teams to protect Firm and client information, strengthen cyber resilience, oversee security technologies that support secure adoption of emerging technologies—including artificial intelligence. The Senior Director serves as a trusted advisor to Firm leadership, aligning security initiatives, security architecture, and capabilities with business strategy and client service.

Key Responsibilities

·       Lead the Firm's technology risk, cybersecurity governance, and records programs, including identity and access management, data protection, cloud governance, incident response governance, vulnerability management, and oversight of enterprise technology controls.

·       Provide oversight for security technologies and controls that are pertinent to AI-enabled platforms, data protection, monitoring, identity, endpoint, email, network, and cloud environments.

·       Guide policy governance, network segmentation, secure access controls, and change management processes to reduce risk and support secure business operations.

·       Oversee threat hunting, security monitoring, detection engineering, vulnerability prioritization, and incident readiness activities in partnership with firm business services departments, and practice leadership.

·       Develop and maintain enterprise security policies, standards, and procedures aligned with industry standards including, but not limited to, NIST, ISO 27001, client outside counsel guidelines, and legal industry best practices.

·       Direct the Firm's Information Governance and Records Management program, including records retention, legal holds, and information lifecycle management.

·       Lead AI governance initiatives by establishing policies, risk assessments, technical controls, monitoring requirements, and security review processes that enable responsible, secure, and client-compliant use of generative AI and emerging technologies.

·       Oversee enterprise security awareness and training through phishing simulations, role-based education, executive briefings, new hire onboarding, and ongoing awareness campaigns that strengthen the Firm's security culture.

·       Partner with Client Relationship teams to support security questionnaires, audits, due diligence reviews, and client meetings regarding the Firm's security posture.

·       Develop firm key indicator reporting, risk indicators, and program metrics for the CIO and Firm leadership while driving continuous improvement across security and governance programs.

·       Collaborate closely with IT leadership, Risk Management, General Counsel, Records Management, Privacy, and Practice Groups to integrate technology governance into Firm operations and strategic initiatives.

·       Drive technology, and practice enhancements that increase general firm security posture.

·       Perform other duties as assigned.

#LI-LM1

Qualifications

·       Bachelor's degree in Information Security, Information Technology, Computer Science, Business, or related discipline.

·       10+ years of progressive leadership in information security, information governance, technology risk, or enterprise security, preferably within an Am Law 200, professional services, or highly regulated environment.

·       Demonstrated experience leading enterprise security governance, client security compliance, and cross-functional initiatives.

·       Strong understanding of AI governance, information lifecycle management, privacy, and regulatory compliance.

·       Professional certifications such as CISSP, CISM, CRISC, IGP, CIPM, or CPP are preferred.

For New York, California and Illinois, the expected salary range for this position is between $250,000 and $335,000.  This position is also eligible for annual bonuses.   The actual compensation will be determined based on experience and other factors permitted by law. 

Jackson Lewis offers a competitive benefits package that includes:

• medical, dental, vision, life and disability insurance
• 401(k) Retirement Plan
• Flexible Spending & Health Savings Account
• firm-paid holidays, vacation, and sick time
• Employee assistance program and other benefits

We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, national origin, gender, age, religion, disability, sexual orientation, veteran status, marital status or any other characteristics protected by law.