Information Security Manager

eNGINE builds Technical Teams. We are a Solutions and Placement firm shaped by decades of interaction with Technical professionals. Our inspiration is continuous learning and engagement with the markets we serve, the talent we represent, and the teams we build. Our Consulting Workforce is encouraged to enjoy career fulfillment in the form of challenging projects, schedule flexibility, and paid training/certifications. Successful outcomes start and finish with eNGINE.eNGINE is hiring an experienced Manager, Information Security to join our security team and lead efforts to advance our organization's security posture. In this role, you will manage and enhance our network, system, identity, and cloud security capabilities. You will collaborate closely with IT teams to oversee security governance, risk management, compliance, and operations across the organization.Key Responsibilities:Establish and maintain security governance frameworks, including policies, processes, procedures, and standardsLead risk management initiatives, including threat intelligence, risk assessment, and mitigation planningOversee compliance programs, including ISO 27001, PCI-DSS, and client assurance audits and questionnairesManage security-related budgets, vendor relationships, and managed security service providersProvide security awareness training and advisory support to IT, leadership, and practice groups on emerging threats and best practicesConduct design and architecture reviews across network, system, application, identity, and cloud infrastructureDirect continual monitoring, testing, and audit lifecycle management, including remediation trackingLead detection and response efforts, including log aggregation, correlation, analysis, and incident responseOversee security operations technologies, including firewalls, network segmentation, vulnerability management, EDR/NGAV, SIEM, and email securityCoordinate and prioritize security projects and continual improvement initiativesQualifications:Bachelor's degree or equivalent, with a minimum of 5 years of security-related experience10+ years of professional experience in information technologyStrong background in IT operations, with related network, systems, or development experience3+ years of experience managing technical security engineering teamsIn-depth knowledge of security threats affecting systems, identities, and cloud environmentsDirect experience implementing and maintaining ISO 27001 and ISO 27701Proven ability to communicate technical risk to non-technical stakeholdersStrong organizational skills, with the ability to manage competing priorities in a dynamic environmentDemonstrated commitment to confidentiality regarding sensitive Firm and personnel informationExcellent interpersonal skills, with a track record of building collaborative, high-performing teamsWillingness to travel to other office locations as requiredPreferred Qualifications:Professional certifications such as CISSP, CISM, CEH, or CIPP (candidates in progress toward certification are encouraged to apply)Prior experience within a law firm or professional services environmentNo C2C, relocation, referral, or sponsorship candidates for this role.For finer details on how eNGINE can impact your career, apply today!