Enterprise Security Compliance Lead

Latham & Watkins

. Coordinate activities related to client security audits, vendor security audits, ISO 27001 assessments, penetration test remediations, and other client responses .

Posted 9/28/2026full-timeLos Angeles • California • United StatesSenior💰 $160,000 - $180,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in coordinating security audits, managing vendor assessments, and ensuring compliance with ISO 27001 standards. Proficient in project management, stakeholder engagement, and maintaining confidentiality of sensitive information.

Highest-signal resume keywords

ISO 27001 ComplianceIT Audit ExperienceSecurity Assessment ManagementProject Management ConceptsVulnerability Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security TechnologiesSecurity Practices and ProceduresCommunication ProtocolsEncryption TechniquesSecurity AuditsRisk ManagementPenetration TestingVulnerability TestingDocumentation ManagementStakeholder Coordination

Soft Skills

Relationship ManagementTeam CoordinationQuality ReviewDeadline ManagementCommunication Skills

Certifications & Qualifications

CISACRISCCDPSECISSP

Industry Keywords

Client Security AuditsVendor Security AuditsIT Risk ManagementSecurity OperationsSensitive Information Protection

About the role

Key responsibilities & impact

Coordinate activities related to client security audits, vendor security audits, ISO 27001 assessments, penetration test remediations, and other client responses
Lead assigned client security reviews from intake through closure
Identify necessary internal stakeholders for security surveys, audits, and reviews
Assemble relevant documentation and complete required forms and questionnaires
Maintain relationships with third-party audit services and independent consultants
Act as project manager for ISO 27001, client, and vendor audits and other assessments
Establish schedules, coordinate stakeholders, meet deadlines, track follow-up, and complete necessary responses
Support penetration and vulnerability testing compliance activities
Identify critical systems and external testing requirements and frequency
Coordinate with Security Operations and follow up on remediation activities to ensure processes and SLAs are met
Coordinate team activities and review work for consistency and quality
Create reports and presentations for senior management

Requirements

What you’ll need

Understanding of business security practices and procedures
Knowledge of information security technologies
Knowledge of communication protocols and encryption techniques/tools
Bachelor's degree or equivalent; a minimum of five (5) years of Security and Technology experience may be considered in lieu of a degree
A bachelor’s degree in Information Systems, Computer Science, Engineering or related field, preferably
Recognized security certifications such as CISA, CRISC, CDPSE, or CISSP, preferably
Minimum of five (5) years of experience in IT audit or IT risk management
Minimum of three (3) years of experience performing security assessments, IT vendor risk assessments, and vulnerability management reviews
Minimum of two (2) years of experience applying project management concepts
Ability to protect and maintain highly sensitive, confidential, privileged, financial, and/or proprietary information

Benefits

Comp & perks

Bonuses awarded in recognition of individual and firm performance
Healthcare, life and disability insurance
Generous 401k plan
At least 11 paid holidays per year
PTO program that accrues 23 days during the first year of employment and grows with tenure
Well-being programs, including mental health services, mindfulness and resiliency, medical resources, well-being events, and more
Professional development programs
Employee discounts
Affinity groups, networks, and coalitions for lawyers and staff
Flexible working schedule that allows for a hybrid and in-office presence may be available