William Blair is hiring: Information Security Lead in chicago
william blairChicago, IL
William Blair is hiring: Information Security Lead in chicago
L7
Industries
Computer Systems Design ServicesOther Computer Related ServicesPortfolio Management and Investment AdviceOverview:
In this role you lead information security governance and incident response at William Blair, shaping policy, risk management, and security awareness across the firm. You drive the security roadmap, coordinate with stakeholders, and oversee client and vendor due diligence as well as regulatory responses. You act as the operational incident lead, directing response efforts, post-incident analysis, and tabletop exercises to strengthen resilience. This position offers meaningful impact through shaping security posture at a premier financial services firm. Compensation / Benefits medical, dental and vision coverage employer-paid short- and long-term disability and life insurance 401(k) with profit sharing paid time off Maven family and fertility benefit parenteral leave including adoption and surrogacy
Responsibilities:
Draft and administer information security policies, standards, and guidelines aligned with the firm’s framework Lead governance maturity assessments and NIST CSF reviews; report on risks and decisions Maintain the Information Security roadmap and oversee improvement initiatives Monitor security reporting with IT; identify trends and propose mitigations Administer policy-exception processes and related dashboards (e.g., Power BI) Lead operational incident response activities, including runbooks, playbooks, and ransomware templates Coordinate post-incident risk assessments, root-cause analyses, and corrective actions Plan and conduct tabletop exercises and simulations (cybersecurity, ransomware, business continuity) Manage the brand and executive impersonation program and support insider threat monitoring Oversee security awareness programs and metrics-driven improvements Own client security due diligence workflow and coordinate vendor security assessments Respond to regulatory and audit requests; engage in industry groups and translate developments into actions
Key requirements:
Bachelor’s (minimum) and/or Master’s degree in cybersecurity, information security, computer science, information systems, or related field 6–8 years of progressively responsible information security or risk governance experience Relevant certifications (e.g., CISSP, CISM, CISA, CRISC, GSEC, GCIH, Security+, PMP) either held or in progress Working knowledge of governance and control frameworks, particularly NIST CSF Proficiency with Microsoft Office and Power BI; strong reporting skills Experience in financial services or regulated industries; familiarity with matrix organizations Experience using GRC platforms to document risks, controls, incidents, exceptions, and remediation Experience leading governance or maturity assessment projects Strong analytical, risk assessment, and executive communication skills Ability to collaborate with both technical and non-technical stakeholders and facilitate exercises/ training Strong analytical thinking Clear written and verbal communication Executive-ready presentation skills Power BI reporting NIST Cybersecurity Framework Incident response planning and tabletop exercises
Apply now (opens in a new tab)
Level
ManagerL7
Location
Chicago, IL
Occupation
Information Security Analysts
Industry
Computer Systems Design Services
Posted
today
To get sharper similar jobs, create your profile using the link below.