Lead Engineer: Information Security

Overview

Mayer Brown is an international law firm positioned to represent the world’s major corporations, funds, and financial institutions in their most important and complex transactions and disputes. We are recognized by our clients as strategic partners with deep commercial instincts and a commitment to creatively anticipating their needs and delivering excellence in everything we do.

We are a collegial, collaborative firm where highly motivated individuals with an unwavering commitment to excellence receive the opportunity, support, and development they need to grow, thrive, and realize their greatest potential all while supporting the Firm’s client service principles of excellence, strategic partnership, commercial instinct, integrated strengths, innovation, and collaboration across our international firm.

If you enjoy working with team members whose defining characteristics are exceptional client service, initiative, professionalism, responsiveness, and adaptability, you may be the person we are seeking to join our Information Technology department in our Chicago, Salt Lake City, or Los Angeles office, as a Lead Engineer:
Information Security.

The Lead Engineer:
Information Security will implement and maintain various technologies to ensure the security of the Firm’s systems. Will be responsible for providing technical leadership for strategic projects and initiatives on the security roadmap, as well as participating in more general network security and architectural efforts. Will also collaborate with other engineers and departments to apply and support best practices for security, server building, change management, account management, documentation, data loss prevention and user experience management.

Essential Functions:

• Ensures that Mayer Brown, LLP has a secure architecture for authorization and authentication internally, as well as business to business
• Implements security architecture of the firm related to transition to cloud (e.g., Azure/M365, Teams/O365 and iManage Cloud)
• Ensures that all security risks are managed and communicated clearly and effectively
• Develops and maintains all documentation related to Global Security Team operations and functions
• Ensures that information is openly communicated and shared with other members of the team
• Ensures that objectives are achieved by working closely with all members of the Firm departments as necessary and in collaboration with the Assistant Director:
  Global Information Security & Senior Director:
  Global Information Security, CISO and Global Information Security
• Ensures that change controls are adhered to and communicated to the partners and staff
• Keeps abreast of all specific security issues
• Analysis of data collected from established Data Loss Prevention system(s) and methods to ensure compliance with Firm policies
• Manages DLP systems and processes as required
• Assists in defining DLP policies to protect firm and client assets
• Defines incident response workflow for DLP positive hits
• Develops metrics for measuring effectiveness of the DLP solution
• Assists in the preparation, approval, implementation and adherence of the Information Security Policies within the Firm
• Manages projects and tasks related to the Firm as directed by the Assistant Director:
  Global Information Security
• Detects and responds to all incidents of an information security nature within the Mayer Brown environment
• Maintains and coordinates incident response planning, assisting in execution of the incident response plan as needed
• Identifies and communicates to management the cause of all information security incidents, making recommendations as to how the specific incidents can be mitigated in the future
• Controls access to the Firm’s Information Systems and related security configuration
• Participates fully in all efforts to develop security policies to meet client or other compliance requirements
• Ensures monitoring and alert notifications are implemented in accordance with the business needs
• Assists in preparing and completing risk assessments for vendors, projects, and systems
• Assists in the development and authorization process of all new IT policies introduced,…