{"@context":"https://schema.org","@type":"JobPosting","title":"Client & Vendor Risk Manager","description":"Intake call on 9/8
\n
\n
\nOFFICE: Dallas or Houston
\nDEPARTMENT: Office of the General Counsel - Information Security
\nFLSA CODE: Exempt
\nREPORTS TO: Director of Information Security
\nThe Information Security Client & Vendor Risk Manager leads the firm’s client due diligence
\nprogram and oversees all information security vetting for third party vendors across the firm.
\nThis role requires deep expertise in security frameworks, strong risk-assessment judgment, and
\nthe ability to influence senior stakeholders, including internal stakeholders, and client security
\nteams. The Manager acts as a key liaison between the firm’s clients, internal leadership, IT
\nSecurity, Procurement, and Risk Management, ensuring the firm meets the heightened
\nexpectations of our clients.
\nEssential Duties and Responsibilities:
\n Own and mature the firm-wide client and vendor due-diligence program, ensuring
\nconsistency, accuracy, and alignment with the firm’s security posture and regulatory
\nobligations.
\n Serve as the firm’s subject-matter expert on information-security controls,
\ncertifications, and risk posture during client audits, RFPs, and reviews or client
\nengagement terms.
\n Lead complex vendor-risk assessments for high-impact technology and service
\nproviders, including review of SOC 2 reports, ISO 27001 certifications, penetration-test
\nresults, cloud-security controls, data-protection, privacy, and retention practices.
\n Develop and maintain the firm’s vendor-risk management framework, including
\nrisk-scoring methodologies, onboarding workflows, and continuous-monitoring
\nprocesses.
\n Partner with Procurement, IT, and Office of General Counsel to evaluate vendor
\ncontracts, negotiate security requirements, and recommend risk-mitigation strategies.
\n Prepare the firm for client audits and regulatory reviews, coordinating evidence
\ncollection, documentation, and SME participation across multiple departments.
\n Represent the firm in client-facing security discussions, including responding to
\nescalated inquiries from corporate counsel, privacy officers, and client security teams.
\n Monitor emerging risks and regulatory developments relevant to the legal industry
\n(e.g., SEC cybersecurity rules, state privacy laws, international data-transfer
\nrequirements).
\n Mentor junior analysts and contribute to the professional development of the broader
\nRisk and Compliance team.
\n Drive continuous improvement, identifying opportunities to streamline due-diligence
\nworkflows, enhance tracking and remediation of client-identified risks, and strengthen the
\nfirm’s security posture.
\nOther duties and responsibilities:
\n Provide management with periodic reports & briefings on evolving topics within their
\narea of responsibility.
\n Other related projects and duties as assigned by the Director of Information Security.
\nQualifications:
\n 6+ years of experience in information security, vendor risk management, compliance, or
\nlegal-industry operations, ideally within an Am Law 200 firm or similarly regulated
\nenvironment.
\n Deep understanding of security frameworks and standards (SOC 2, ISO 27001, NIST
\nCSF, HIPAA, GLBA, state privacy laws).
\n Experience conducting or leading vendor-risk assessments for enterprise-level technology
\nproviders.
\n Strong communication skills, including the ability to brief partners, respond to client
\nsecurity teams, and translate technical concepts for non-technical audiences.
\n Demonstrated ability to work independently, manage sensitive information, and lead
\ncross-functional initiatives in a high-pressure environment.
\n Professional certifications such as CTPRA, ISO 27001 Lead Implementer or Lead
\nAuditor and CISSP, CISM, CRISC, or CISA required.
\n Experience with legal-industry technologies (DMS, e-discovery platforms, cloud-based
\npractice-management tools) is a plus.
\nExtent of Contact (Within and outside the Firm):
\nThis position requires contact with individuals within the firms as follows:
\n Daily contact with staff from the Firm’s Information Technology, Client Development and Office
\nof the General Counsel teams.
\n  Moderate contact with Firm’s attorneys and client representatives.
\n Occasional contact with Firm Management.
\nThis position requires contact with individuals outside the firm as follows:
\n Moderate contact with Firm vendors or potential vendors.
\n Moderate contact with Firm clients.
\nPhysical Demands:
\n Must be able to routinely lift and carry event materials and other items up to 10 pounds.
\n Must be able to work at a computer for extensive periods of time.
\n Position requires extensive telephone use.
\n Must be able to lift, squat, kneel and bend.
\n Position requires the ability to visit face-to-face and on the phone with firm lawyers.
\nWorking Condition and Environment:
\n Position is full-time and requires a five-day work week and standard hours as outlined in
\nthe Firm policy manual. Additional hours, including weekend and evening hours may be
\nrequired to perform the essential functions of the job.
\n Must be able to perform essential duties of the position with time constraints and frequent
\ninterruptions.
\n Ability to work well in high pressure environments.
\n Fully vaccinated for COVID-19, subject to accommodation.
\n 24x7 communication access is required.
\n This position is fully remote. You will be required to come to the office periodically for
\nteam meetings or when there is a business or client need.
\n There is potential for travel when needed for team meetings, onsite assessments etc. when
\nthere is a business or client need.
\n When working remotely, you must have secure and reliable internet service and a safe,
\nprivate workspace from which to work.
\n ","datePosted":"2026-08-27","hiringOrganization":{"@type":"Organization","name":"Talance Group"},"validThrough":"2026-09-26","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","streetAddress":"United States","addressRegion":"Texas","addressCountry":"United States"}},"employmentType":"FULL_TIME","identifier":{"@type":"PropertyValue","name":"Talance Group","value":"17878506771670145926FOT"},"directApply":true}