Paul Hastings is a leading international law firm that provides innovative legal solutions to many of the world's top financial institutions and Fortune Global 500 companies. With a strong presence throughout Asia, Europe, Latin America, and the U.S., we have the global reach and extensive capabilities to provide personalized service wherever our clients’ needs take us. As one of the world’s leading law firms, we seek dynamic individuals who share our commitment to service, innovation, and professional growth.

We have an opening for an Analyst, Information Security Communications.

The Analyst, Information Security Communications supports the Information Security Awareness Manager in implementing the Firm’s information security awareness and training program, with a focus establishing and maintaining its ISO 27k awareness. The key to success of this position will be an ability to articulate and how security controls relate to business technology objectives. The primary function will be to support coordinated change management communications and training internal to the Technology divisions, promoting a common understanding of how to operationalize the Firm’s technology processes and procedures. This position directly reduces information security risk by ensuring both the “how” and “why” of technology discipline (e.g., ISO 27k, NIST controls) are embedded into our culture.

As needed, this position will also support the PH Security Awareness Program Manager’s efforts to drive a culture of security across the Firm. This position will support a broad set of activities, including: creating and communicating information security campaigns, alerts and communications; enforcing compliance with training requirements; communicating security policies to all personnel; communicating the value and impact of security controls within the Technology staff; and other tasks as assigned. The Analyst, Information Security Communications will also be responsible for regularly tracking and reporting related metrics.

The Analyst, Information Security Communications will support the Information Security Awareness Program Manager with the following:

• Standardize the understanding of the business value of ISO 27k / NIST security controls to the Firm’s technology professionals;
• Train the Firm’s technology professionals on current security control assessment practices;
• Advise on change management-related training and communications strategies for enhancing technology departments’ process compliance;
• Continuously evaluate the effectiveness of existing information security training, education, and awareness program/activities;
• Mature and maintain the approach, goals, and objectives for the information security awareness and training program, including repeatable processes, reporting and metrics;
• Contribute to creating a culture of security by growing awareness, engaging users in security best practices, and reducing risky behaviors;
• Ensure that our information security awareness and training program communicates Firm security policies and requirements so that users know and understand them; and
• Collaborate with the information security team to identify areas of risk and develop targeted and roles-based information security training, education, and awareness activities.

In addition, the Analyst, Information Security Communications will be expected to have:

• A working knowledge of information security and risk mitigation principles, theories, and techniques in daily work;
• Demonstrated understanding and use of basic project management methodologies;
• Demonstrated experience with security controls, such as support for security reviews and audits;
• Excellent interpersonal skills with the ability to communicate effectively verbally and in writing with all levels within the organization, including both technical and non-technical personnel;
• Ability to communicate in a simple, clear, and concise manner to the various departments and personnel within the Firm;
• Creative thinking and understanding of audience to produce engaging materials in a variety of formats and media, including user guides;
• A high degree of independence, integrity and confidentiality;
• Demonstrated knowledge of NIST Cybersecurity Framework (CSF); and
• Exposure to ISO27001 certification requirements and/or certification maintenance.

Qualifications:

• Bachelor’s degree (required); and
• At least 7 years’ work experience in the Information Security sector.

Employees will be provided with an excellent career opportunity in a collaborative environment, in addition to a generous total compensation package with the opportunity to earn bonuses based on individual contribution and firm profitability.

Eligible employees can participate in the Firm’s comprehensive benefits program, which include the following:

• Medical, Dental, Vision, Life/AD&D, Long Term Care, and Short and Long Term Disability
• Voluntary 401k plan and profit sharing
• 10 paid holidays per year, and a generous PTO program
• Family Support including Paid Parental Leave and Fertility coverage
• Bright Horizons (Back-up child care, elder care and online tutoring)
• Dependent Care
• Wellness programs (Employee Assistance Program, mental health and well-being events)
• Anniversary Bonus Program
• Professional Development Programs
• Transportation Allowance and Commuter Benefits
• Auto/Home/Legal Insurance
• Pet Insurance
• Employee discounts
• And more!

The Firm has a range of diversity initiatives including our Paul Hastings Affinity Networks (PHANs), Women’s Initiative, and PH Balanced. These initiatives provide a firmwide forum to share experiences, as well as an opportunity to participate in a supportive network with common interests to help make life at the firm more inclusive. Learn more about our Global Diversity, Inclusion and Wellness Initiatives here.

Paul Hastings LLP is an equal employment and affirmative action employer F/M/Disability/Vet/Sexual Orientation/Gender Identity.