Information Security Operations Manager
Company: Warner Norcross + Judd
Location: Grand Rapids, MI (Remote)
Type: Full-time
Remote: Yes
Posted: 2026-09-03
About this role
The
Information Security Operations Manager
is responsible for overseeing the day-to-day security operations of the firm's technology environment. This includes managing the firm's security tooling and vendor relationships, leading vulnerability and patch management programs, and coordinating incident detection and response activities. The Manager works closely with the Director of Information Technology, the Network Operations Manager, and external security partners to maintain a strong, measurable cybersecurity posture. This role supervises one direct report and serves as an internal subject matter expert on information security matters for attorneys, administrative staff, and firm leadership.
About the Opportunity
Responsibilities:
- Oversee security operations, including the firm’s external Security Operations Center vendor, alert triage, incident response, and service-level performance.
- Administer and optimize security platforms, including EDR, SIEM/log management, and intrusion detection and prevention tools.
- Lead incident response planning and execution, including containment, recovery, post-incident reviews, and playbook testing.
- Manage vulnerability scanning, patching, risk prioritization, and remediation across systems, networks, and cloud services.
- Monitor emerging threats and ensure the firm’s technology environment follows recognized security standards and hardening practices.
- Coordinate client and insurance security questionnaires, documentation, interviews, and cyber liability renewal activities.
- Develop and maintain information security policies, technology inventories, and network and data-flow diagrams.
- Track security metrics and clearly communicate the firm’s cybersecurity posture to IT leadership and the Security Committee.
- Supervise and develop a security team member and promote firmwide security awareness through training and policy communication
The physical demands of this potion are representative of those tha...