Manager, Information Security Compliance & Risk

Role Overview

The Manager, Information Security Compliance and Risk is responsible for leading the firm’s Governance, Risk, and Compliance (GRC) program, including regulatory compliance, enterprise risk management, and assurance activities that support client requirements and regulatory obligations. This role also serves as the primary owner of Information Security AI governance, ensuring that the firm’s use of AI and machine learning technologies aligns with security, privacy, regulatory, and client expectations.

What You Will Do

Governance and Compliance Leadership, Regulatory Authorization and Assurance, AI Security Governance, Risk Management, Third-Party and Emerging Risk Governance, Audit and Assurance Coordination, Team Leadership, Cross-Functional Collaboration

Why It Might Be a Fit

Sustained audit readiness for SOC 2 and ISO 27001 with minimal disruption, Clear, measurable visibility into information security and AI-related risk posture, Consistent, scalable governance processes supporting firm growth and responsible AI adoption, Strong alignment between governance requirements and operational security controls

Requirements

• Bachelor’s degree required; degree in information security, risk management, or a related field preferred
• 7 to 10 years of experience in information security, GRC, audit, or risk management required
• Prior experience managing SOC 2 and or ISO 27001 programs required
• Demonstrated people management or team leadership experience
• Professional certifications such as CISSP, CISM, CRISC, CGRC, or ISO 27001 Lead Implementer or Auditor
• Experience with GRC platforms and risk management tooling
• Experience supporting AI governance, data governance, or emerging technology risk programs
• Experience supporting client-driven security assessments in a professional services environment

Benefits

• competitive compensation
• comprehensive benefits package
• discretionary annual bonus
• healthcare
• PTO
• retirement
• learning budget
• parental leave
• wellness
• visa/relocation
• remote flexibility
• stipends