Lead Engineer - Information Security

LaSalle Network is the leading provider of direct hire and temporary staffing services, connecting top talent with opportunities across various industries.

About the role

The Lead InfoSec Engineer is responsible for implementing and maintaining technologies to protect the Firm’s systems. This role provides technical leadership on strategic security initiatives while supporting network security, architecture, and best practices across the organization.

Responsibilities

• Ensure secure architecture for authentication and authorization (internal and B2B)
• Implement firm security architecture supporting cloud transitions (Azure, M365, Teams, O365)
• Manage and communicate security risks effectively
• Develop and maintain security documentation
• Collaborate across IT and business departments to meet security objectives
• Ensure adherence to change control processes and communicate updates
• Stay current on emerging security threats and solutions
• Analyze DLP system data to ensure policy compliance
• Manage DLP systems and processes
• Define DLP policies and incident response workflows
• Develop DLP effectiveness metrics
• Assist with creation and enforcement of Information Security policies
• Manage security-related projects and tasks
• Detect and respond to security incidents
• Coordinate incident response planning and execution
• Identify causes of incidents and recommend mitigation strategies
• Control access to firm systems and configurations
• Implement monitoring and alerting based on business needs
• Conduct and support risk assessments (vendors, systems, projects)
• Support development and approval of IT security policies
• Ensure independent security reviews are completed and gaps addressed
• Monitor physical data security (e.g., backup storage)
• Educate employees on security best practices
• Partner with IT teams to enforce security standards
• Maintain internal security awareness resources
• Participate in an on-call rotation; off-hours work may be required for global coordination

Requirements

• Bachelor’s degree in a related field OR equivalent experience
• 5+ years in Information Security
• CISSP or CEH certification preferred
• Strong knowledge of CISSP / CEH principles
• Knowledge of ISO 27002 (preferred)
• Networking and security standards expertise
• Authentication methods experience
• Firewall and network security knowledge (preferred)
• Disaster Recovery knowledge (preferred)
• Cloud security experience (Azure, M365, O365)
• DLP incident handling and reporting
• Microsoft Office proficiency
• Experience securing AI-driven systems and using AI tools (preferred)

Skills

• Strong communication and interpersonal skills
• Ability to work in a collaborative, high-demand environment
• Effective under pressure with shifting priorities
• Self-starter with strong initiative
• Customer-focused mindset
• High attention to detail and organization
• Strong problem-solving and strategic thinking skills
• Ability to balance business needs with security risks
• Willingness to challenge the status quo
• Maintains confidentiality and discretion

Preferred Tools/Platforms

• Microsoft Defender for Endpoint
• Thales
• CrowdStrike Falcon
• SIEM tools
• CyberArk
• Rapid7
• Palo Alto

Benefits

• Comprehensive healthcare, vision, and dental coverage
• Family Medical Leave
• Worker's Compensation
• Paid Leave and Sick Leave

Pay

Annual salary range of $150,000 - $160,000

Schedule

• Primary Office: Chicago
• Monday – Friday
• Hours: 8:30 AM – 5:00 PM OR 9:00 AM – 5:30 PM (additional hours as needed)
• Up to 20% travel (domestic and international)

FLSA Status: Exempt. Reports to Assistant Director: Global Information Security.