What are the responsibilities and job description for the Governance Risk & Compliance Analyst position at Nelson Mullins Riley & Scarborough?
Nelson Mullins, an Am Law 100 law firm, is seeking a Governance, Risk & Compliance (GRC) Analyst to support the firm's information security, vendor risk management, and compliance initiatives. This role serves as a key resource for client security assessments, vendor risk reviews, and audit support activities. The ideal candidate is a proactive problem solver with exceptional communication skills, strong organizational abilities, and a desire to grow within a dynamic and evolving security and compliance environment
In this role, you will manage client security assessments, vendor risk reviews, and compliance-related initiatives while serving as a primary point of contact for attorneys, clients, vendors, and external auditors. You will coordinate third-party attestations and audits, maintain compliance documentation, review vendor security risks, and assist with the development and ongoing maintenance of information security policies and procedures. This position requires the ability to manage multiple concurrent projects, communicate complex compliance concepts to a variety of audiences, proactively identify and address risk gaps, and deliver exceptional client service while supporting the firm's governance and compliance objectives.
The ideal candidate will have experience supporting governance, risk, compliance, information security, vendor management, audit support, or a related function. Candidates should demonstrate excellent written and verbal communication skills, strong time management abilities, a self-motivated approach to work, and a desire to expand their knowledge within a collaborative team environment. Experience with compliance frameworks, client security assessments, or third-party risk management is preferred, though training will be provided for candidates with relevant transferable experience.
In this role, you will manage client security assessments, vendor risk reviews, and compliance-related initiatives while serving as a primary point of contact for attorneys, clients, vendors, and external auditors. You will coordinate third-party attestations and audits, maintain compliance documentation, review vendor security risks, and assist with the development and ongoing maintenance of information security policies and procedures. This position requires the ability to manage multiple concurrent projects, communicate complex compliance concepts to a variety of audiences, proactively identify and address risk gaps, and deliver exceptional client service while supporting the firm's governance and compliance objectives.
The ideal candidate will have experience supporting governance, risk, compliance, information security, vendor management, audit support, or a related function. Candidates should demonstrate excellent written and verbal communication skills, strong time management abilities, a self-motivated approach to work, and a desire to expand their knowledge within a collaborative team environment. Experience with compliance frameworks, client security assessments, or third-party risk management is preferred, though training will be provided for candidates with relevant transferable experience.
- Bachelor's degree in information security, Cybersecurity, Business, Risk Management, or a related field preferred.
- Two or more years of experience in governance, risk, compliance, vendor risk management, audit support, or a related function.
- Experience supporting client security assessments, third-party audits, vendor risk reviews, or compliance programs preferred.
- Security , CISSP, CRISC, ISO 27001 Lead Auditor, or related certifications preferred