Kforce has a client in Pittsburgh, PA that is partnering with a local law firm that is seeking a Manager of Information Security to lead and enhance our firm's Information Security Management System (ISMS) and Privacy Information Management System (PIMS). This leadership role is responsible for overseeing security engineering, operations, incident response, and policy development. Responsibilities: * Lead and mentor the security team, fostering a high-performance environment * Develop, maintain, and enforce security policies, procedures, and training across departments * Manage ISO 27001/27701 lifecycle and liaise with consulting teams to ensure compliance * Provide expert guidance on technical threats, risk mitigation, and security best practices * Oversee vulnerability scanning, remediation programs, and security monitoring * Establish security metrics and risk trend dashboards to track progress * Manage relationships with security service providers and enhance their capabilities * Assess new hardware and software for security risks and provide recommendations * Develop and implement security awareness programs to educate employees on risks * Collaborate with General Counsel on client security audits, RFPs, and compliance * Maintain security controls to protect client data from unauthorized access and threats * Ensure compliance through training, internal audits, and third-party security reviews * Lead incident response efforts and serve as the primary contact for security incidents * Continuously assess and improve the firm's risk management strategies