Information Security & IT Manager
Core
Manage day-to-day information security and IT operations for a SaaS platform serving legal professionals, ensuring a secure, reliable, and well-managed technology environment.
Role type
Hands-on Information Security & IT Manager
Builds
A secure, AI-enabled legal workspace hosted on major cloud providers
Domain
Legal technology, SaaS, Cloud Security, AI-enabled environments
Deliverable
Production ML models | infrastructure | dashboards & analysis
Required skills
Cloud security, Identity and access management (IAM), Endpoint security, Vulnerability management, Incident response, Secure software development, Compliance frameworks (SOC 2, ISO 27001), Network architecture, SaaS platform management, Vendor management
Preferred skills
SIEM, EDR, GRC tools, Legal tech experience, Microsoft 365/Entra ID certifications, AWS Security Specialty, CISSP, CISM
Technologies
Microsoft 365, Entra ID, Exchange Online, SharePoint, Defender for Business, MDM, AWS, Vercel, Cloud providers
Responsibilities
Maintain security controls across cloud, applications, endpoints, identity, and SaaS platforms; Monitor and respond to security alerts, incidents, and vulnerabilities; Coordinate remediation activities with Engineering, Product, and third-party providers; Manage user access, onboarding, offboarding, devices, and endpoint security; Administer identity and access management and Microsoft 365 security controls; Manage enterprise applications, SaaS platforms, licensing, integrations, and technology vendors; Maintain network infrastructure and coordinate troubleshooting or improvements; Support secure software development, architecture reviews, and penetration testing; Maintain security documentation, risk registers, procedures, and asset inventories; Support SOC 2, privacy, audits, customer security reviews, and compliance activities; Manage security and technology vendors; Provide regular reporting on security risks, incidents, and remediation progress; Escalate material risks and incidents to leadership and CORTO Information Security.
Seniority
Mid-level, hands-on IC
