Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 13 hours agoWe saw it 107 min after it went up

Information Security Lead

William Blair53 open roles

Pay
$120,000 – $150,000 a year
Where
Chicago, Illinois, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInformation Security LeadWilliam Blair · Chicago, Illinois, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on William Blair's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.4% of postings close within 7 days. Measured by our own scanner across the market. William Blair postings stay open a median of 45 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.4%7 days
  4. 20.0%14 days
  5. 35.5%30 days
  6. 58.6%60 days
This job: posted 13 hours ago

William Blair median: 45 days open

The posting

Solutions for Today’s Challenges. Vision for Tomorrow’s Opportunities.

Join William Blair, the Premier Global Partnership.

The Information Security Lead is accountable for key components of the firm’s Information Security governance and incident response programs. Reporting to the Director of Information Security, the role independently manages the security policy framework, maturity assessments, incident response, security awareness, client and vendor due diligence, and policy exceptions. The Lead serves as the operational lead for cybersecurity incidents, maintains the Information Security roadmap, supports regulatory and audit requests, and works with stakeholders across the firm to identify and mitigate risk.

Responsibilities include but may not be limited to:

Governance and Risk Management

  • Draft, maintain, and administer Information Security policies, standards, and guidelines aligned with the firmwide security framework, and advise stakeholders on implementation requirements and resource needs.
  • Lead governance maturity assessments, including NIST Cybersecurity Framework reviews for Information Security, and report status, risks, dependencies, and decisions required.
  • Maintain the Information Security roadmap and improvement initiatives, tracking progress and escalating priority or funding decisions.
  • Monitor security reporting with the IT team, identify trends, and recommend risk-mitigation actions.
  • Administer the policy-exception process and related reporting dashboards, including Power BI.

Incident Response

  • Develop, maintain, and test incident response plans, runbooks, playbooks, and ransomware response templates.
  • Serve as the operational incident lead, coordinating response activities, communications, evidence, decision, and documentation; escalate major incidents and external communications to the Director of Information Security.
  • Lead post-incident risk assessments and root-cause analyses and track corrective actions through completion.
  • Plan and lead tabletop exercises and simulations, including annual cybersecurity and ransomware, business continuity, vendor, and employee group exercises, and report outcomes and recommended improvements.
  • Manage the brand and executive impersonation program and support insider threat monitoring.

Security Awareness

  • Manage the security awareness program, including new-hire and ongoing employee training, and use completion and results metrics to recommend program improvements.

Client and Vendor Due Diligence

  • Own the client security due diligence workflow, coordinating stakeholder review and escalating material risk positions to the Director of Information Security.
  • Lead initial and ongoing vendor security assessments in partnership with the Risk Management team.

Regulatory, Audit, and Industry Engagement

  • Manage Information Security responses to regulatory and audit information requests.
  • Participate in industry working groups and translate cybersecurity developments into recommended actions.

Qualifications

  • Bachelor’s and or Master’s degree in cybersecurity, information security, computer science, information systems, or a related field.
  • 6-8 years of progressively responsible experience in information security, cybersecurity, technology risk, or security governance.
  • One or more relevant certifications, held or in progress: CISSP, CISM, CISA, CRISC, GSEC, GCIH, CompTIA Security+, or PMP.
  • Working knowledge of security governance and control frameworks, particularly the NIST Cybersecurity Framework.
  • Proficiency with Microsoft Office (Excel, PowerPoint, Word, Teams, SharePoint) and reporting tools such as Power BI.
  • Experience in financial services or another regulated industry, working across a matrix organization.
  • Experience using governance, risk, and compliance (GRC) platforms to document risks, controls, exceptions, incidents, and remediation.
  • Experience leading security governance or maturity assessment projects.
  • Strong analytical and risk-assessment skills, with sound judgment when managing incidents, exceptions, and material risks.
  • Clear written and verbal communication, including the ability to translate technical issues into business-risk language and executive-ready materials.
  • Strong project-management, organization, and documentation skills, with a high degree of professionalism, discretion, and attention to detail.
  • Ability to collaborate with technical and nontechnical stakeholders and to facilitate exercises, training, and discussions.

#LI-CH

#LI-HYBRID

A reasonable estimate of the current base salary range at time of posting is below. Base salary does not include other forms of compensation or benefits. Actual base salary within the specified range is based on several factors, including but not limited to applicant's skills, prior relevant experience, specific degrees and certifications, job responsibilities, market considerations and, if applicable, the location of the position.

This role is eligible for either a discretionary annual bonus (based on company, business unit and individual performance) and/or commission-based incentives.

Our featured benefit offerings include medical, dental and vision coverage, employer paid short & long-term disability and life insurance, 401(k), profit sharing, paid time off, Maven family & fertility benefit, parental leave (including adoption, surrogacy, and foster placement), as well as other voluntary benefits.

Salary Range

$120,000—$150,000 USD

About Our Firm

William Blair strives to attract qualified candidates who specialize in investment banking, investment management, private wealth management, and other strategic resource groups. We are committed to empowering our colleagues to deliver client success and engage in our communities. Our firm has delivered trusted advice for nine decades, continuing to deepen our expertise and relationships across asset classes and markets throughout North America, Europe, and Asia. We provide advisory services, strategies, and solutions to meet clients’ evolving needs amid dynamic market conditions and varying industries. What sets us apart is that we are an independent partnership, with colleagues who have unique experiences, perspectives, and backgrounds. We empower our people to bring their best thinking so we can deliver the tailored, thoughtful work and problem-solving abilities that our clients expect. We invite you to learn more about us by visiting williamblair.com.

William Blair is an equal opportunity employer. It complies with all laws and regulations that prohibit discrimination in employment practice because of race, color, religion, creed, ancestry, marital status, gender, age, national origin, sexual orientation, unfavorable discharge from the military service or on the basis of a physical or mental disability that is unrelated to the employee's ability to perform the duties of the job applied for. EOE m/f/d/v

Be aware of hiring scams: William Blair has clear processes and guidelines with regards to recruiting. We do not request personal financial information in connection with an employment application nor does William Blair extend any employment offers without first conducting an interview through one of its registered offices. William Blair does not use instant messaging services such as WhatsApp, Telegram, or iMessage as part of the recruiting or interviewing process.

Note to External Recruiters / Search Firms: William Blair does not accept unsolicited resumes and will not pay for any placement resulting from the receipt of an unsolicited resume. Any unsolicited resumes received will not be considered as a valid submission.

Download William Blair's privacy policies for job applicants:

  • California Consumer Privacy Act Privacy Notice (CCPA)
  • General Data Protection Regulation Privacy Notice (GDPR)

Contact us should you have any questions or concerns.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against William Blair's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on William Blair's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    William Blair's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.