Charlotte - Director, Information Security

About the role

At Winston Taylor, we set the standard together. Winston Taylor is a transatlantic law firm built for the businesses, people, and markets driving capital and innovation. Here, you're in the room, in the action, sleeves rolled up. You'll work with leading clients—disruptors, fast‑growth companies—and help them stay one step ahead of the moment and make critical decisions that shape their future. We're present in the U.S., U.K., Europe, Latin America, and the Middle East, combining the scale and speed that clients demand. You'll be trusted with real responsibility from the outset and build experience through hands‑on work. We take your progression personally, providing the platform for you to shape the work around your goals and aspirations. Step into the moments that matter. Join Winston Taylor.

The Director of Information Security is a key leadership role within the firm’s Security Engineering & Operations team responsible for developing, overseeing, and maintaining Winston Taylor's cyber security program. This role covers all aspects of security engineering, security operations, and incident response. The ideal candidate is a technologist at heart with a deep security background, comfortable flexing between strategic thinking and tactical execution. The Director reports to the Chief Information Security Officer and collaborates closely with Information Technology, Security Compliance, and business stakeholders to ensure proactive defense, rapid response to threats, and continuous advancement of security architecture and automation.

Responsibilities

• Develops and implements a comprehensive security strategy aligned with the firm's business objectives, goals, and requirements.
• Establishes and maintains relationships across internal departments and practice areas to foster a security‑aware culture.
• Manages a dedicated team; fosters a collaborative and high‑performance culture of delivering outcomes.
• Evaluates, designs, and implements security solutions and controls to protect the firm's infrastructure, systems, devices, and data.
• Collaborates with cross‑functional Information Technology teams to assess risks and partners to develop requirements and foster implementation of security controls.
• Oversees day‑to‑day cyber security operations, monitoring, detection engineering, and manages the response to security alerts, escalations, and incidents.
• Leads and supports security incident response protocols, including investigations, containment, and resolution of security events and incidents.
• Develops and maintains security incident response plans, including coordination with internal stakeholders and external partners.
• Manages relationships with third‑party vendors, managed security providers, and security technology partners.
• Develops and tracks key performance indicators (KPIs) and metrics for detection, response, and security engineering effectiveness.
• Identifies and evaluates emerging threats and vulnerabilities and coordinates with stakeholders and system owners to implement appropriate mitigations.
• Ensures continuous improvement through purple teaming, simulation exercises, and lessons learned from incidents.

Requirements

• Bachelor’s degree in information technology, information security, or a related field (required).
• 8+ years of progressive experience in cybersecurity, with significant experience in security operations and engineering (required).
• 5+ years of experience in a security leadership role (required).
• Must live within a commutable distance to a firm office and be able to come into the office 3‑4 days per week.

Qualifications

• Relevant certifications (e.g., CISSP, CISM, GIAC) are desirable.

Skills

• Deep expertise in designing and deploying leading security technologies such as SIEM, EDR/NGAV, SOAR, firewalls, IDS/IPS, DLP, and cloud security platforms.
• Strong understanding of the modern threat landscape, adversary tactics, and detection engineering methodologies.
• Familiarity with cloud security principles and securing hybrid‑cloud architectures (e.g., Azure, AWS, GCP).
• Familiarity with generative AI security risks and control models (e.g., OpenAI, Anthropic, Harvey AI).
• Proven leadership abilities with a track record of building and leading high‑performing teams.
• Strong leadership, communication, and executive presentation skills.
• Experience working in a global professional services or law firm environment is highly desirable.

Benefits

Winston offers comprehensive benefits that provide a full spectrum of coverage and support for full‑time employees and their families.

Pay

The target annual salary range for this role is $240,000‑$280,000 based on a regular, full‑time schedule. Compensation is determined by experience, qualifications, market data, and internal equity. Total compensation includes a comprehensive healthcare benefits package, yearly retirement contribution, and may include an annual discretionary merit bonus.

Schedule

Expectation to work on‑site 3‑4 days per week; must reside within a commutable distance to a firm office.