{"id":3358467,"url":"https://alion.io/job/william-blair-information-security-lead","title":"Information Security Lead","company":{"id":14933,"name":"William Blair","domain":"williamblair.com","url":"https://alion.io/company/william-blair","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":76,"open_postings":12,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":62,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":150000,"currency":"USD","period":"year","gross":null,"usd_annual":150000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"Microsoft Office","optional":false},{"name":"Power BI","optional":false},{"name":"SharePoint","optional":false},{"name":"Telegram","optional":false},{"name":"WhatsApp","optional":false}],"status":"live","first_seen_at":"2026-10-27T16:24:02Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T01:19:18Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Solutions for Today’s Challenges. Vision for Tomorrow’s Opportunities.\nJoin William Blair, the Premier Global Partnership.\nThe Information Security Lead is accountable for key components of the firm’s Information Security governance and incident response programs. Reporting to the Director of Information Security, the role independently manages the security policy framework, maturity assessments, incident response, security awareness, client and vendor due diligence, and policy exceptions. The Lead serves as the operational lead for cybersecurity incidents, maintains the Information Security roadmap, supports regulatory and audit requests, and works with stakeholders across the firm to identify and mitigate risk.\nResponsibilities include but may not be limited to:\nGovernance and Risk Management\nDraft, maintain, and administer Information Security policies, standards, and guidelines aligned with the firmwide security framework, and advise stakeholders on implementation requirements and resource needs.\nLead governance maturity assessments, including NIST Cybersecurity Framework reviews for Information Security, and report status, risks, dependencies, and decisions required.\nMaintain the Information Security roadmap and improvement initiatives, tracking progress and escalating priority or funding decisions.\nMonitor security reporting with the IT team, identify trends, and recommend risk-mitigation actions.\nAdminister the policy-exception process and related reporting dashboards, including Power BI.\n Incident Response\nDevelop, maintain, and test incident response plans, runbooks, playbooks, and ransomware response templates.\nServe as the operational incident lead, coordinating response activities, communications, evidence, decision, and documentation; escalate major incidents and external communications to the Director of Information Security.\nLead post-incident risk assessments and root-cause analyses and track corrective actions through completion.\nPlan and lead tabletop exercises and simulations, including annual cybersecurity and ransomware, business continuity, vendor, and employee group exercises, and report outcomes and recommended improvements.\nManage the brand and executive impersonation program and support insider threat monitoring.\nSecurity Awareness\nManage the security awareness program, including new-hire and ongoing employee training, and use completion and results metrics to recommend program improvements.\nClient and Vendor Due Diligence\nOwn the client security due diligence workflow, coordinating stakeholder review and escalating material risk positions to the Director of Information Security.\nLead initial and ongoing vendor security assessments in partnership with the Risk Management team.\nRegulatory, Audit, and Industry Engagement\nManage Information Security responses to regulatory and audit information requests.\nParticipate in industry working groups and translate cybersecurity developments into recommended actions.\nQualifications\nBachelor’s and or Master’s degree in cybersecurity, information security, computer science, information systems, or a related field.\n6-8 years of progressively responsible experience in information security, cybersecurity, technology risk, or security governance.\nOne or more relevant certifications, held or in progress: CISSP, CISM, CISA, CRISC, GSEC, GCIH, CompTIA Security+, or PMP.\nWorking knowledge of security governance and control frameworks, particularly the NIST Cybersecurity Framework.\nProficiency with Microsoft Office (Excel, PowerPoint, Word, Teams, SharePoint) and reporting tools such as Power BI.\nExperience in financial services or another regulated industry, working across a matrix organization.\nExperience using governance, risk, and compliance (GRC) platforms to document risks, controls, exceptions, incidents, and remediation.\nExperience leading security governance or maturity assessment projects.\nStrong analytical and risk-assessment skills, with sound judgment when managing incidents, exceptions, and material risks.\nClear written and verbal communication, including the ability to translate technical issues into business-risk language and executive-ready materials.\nStrong project-management, organization, and documentation skills, with a high degree of professionalism, discretion, and attention to detail.\nAbility to collaborate with technical and nontechnical stakeholders and to facilitate exercises, training, and discussions.\nA reasonable estimate of the current base salary range at time of posting is below. Base salary does not include other forms of compensation or benefits. Actual base salary within the specified range is based on several factors, including but not limited to applicant's skills, prior relevant experience, specific degrees and certifications, job responsibilities, market considerations and, if applicable, the location of the position.\nThis role is eligible for either a discretionary annual bonus (based on company, business unit and individual performance) and/or commission-based incentives.\nOur featured benefit offerings include medical, dental and vision coverage, employer paid short & long-term disability and life insurance, 401(k), profit sharing, paid time off, Maven family & fertility benefit, parental leave (including adoption, surrogacy, and foster placement), as well as other voluntary benefits. \nSalary Range\n$120,000—$150,000 USD\n\nAbout Our Firm\nWilliam Blair strives to attract qualified candidates who specialize in investment banking, investment management, private wealth management, and other strategic resource groups. We are committed to empowering our colleagues to deliver client success and engage in our communities. Our firm has delivered trusted advice for nine decades, continuing to deepen our expertise and relationships across asset classes and markets throughout North America, Europe, and Asia. We provide advisory services, strategies, and solutions to meet clients’ evolving needs amid dynamic market conditions and varying industries. What sets us apart is that we are an independent partnership, with colleagues who have unique experiences, perspectives, and backgrounds. We empower our people to bring their best thinking so we can deliver the tailored, thoughtful work and problem-solving abilities that our clients expect. We invite you to learn more about us by visiting williamblair.com.\nWilliam Blair is an equal opportunity employer. It complies with all laws and regulations that prohibit discrimination in employment practice because of race, color, religion, creed, ancestry, marital status, gender, age, national origin, sexual orientation, unfavorable discharge from the military service or on the basis of a physical or mental disability that is unrelated to the employee's ability to perform the duties of the job applied for. EOE m/f/d/v\nBe aware of hiring scams: William Blair has clear processes and guidelines with regards to recruiting. We do not request personal financial information in connection with an employment application nor does William Blair extend any employment offers without first conducting an interview through one of its registered offices. William Blair does not use instant messaging services such as WhatsApp, Telegram, or iMessage as part of the recruiting or interviewing process.\nNote to External Recruiters / Search Firms: William Blair does not accept unsolicited resumes and will not pay for any placement resulting from the receipt of an unsolicited resume. Any unsolicited resumes received will not be considered as a valid submission.\nDownload William Blair's privacy policies for job applicants:\n California Consumer Privacy Act Privacy Notice (CCPA)\n General Data Protection Regulation Privacy Notice (GDPR)\n Contact us should you have any questions or concerns.","description_format":"text","description_chars":7823,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Wealth Management & Financial Advisors","Asset Management & Funds","Information Security","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-10-27T20:34:25Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 13 · green card filings: 2","filings_12m":13,"filings_prev_12m":14,"green_card_filings_12m":2,"median_offered_wage_usd":172833,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":62,"reasons":["conf:2","stale_co","velocity","win:early"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":150000,"is_top_pay":false},"html_url":"https://alion.io/job/william-blair-information-security-lead","json_url":"https://alion.io/job/william-blair-information-security-lead.json","meta":{"generated_at":"2026-10-30T01:26:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1906,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":14933},"rest":"https://alion.io/mcp/rest/get_company?id=14933"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwilliam-blair-information-security-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwilliam-blair-information-security-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwilliam-blair-information-security-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/william-blair-information-security-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwilliam-blair-information-security-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3358467}},{"tool":"search_jobs","arguments":{"company":"williamblair.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3358467},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}