Governance Risk & Compliance Analyst

About the role

Nelson Mullins, an Am Law 100 law firm, is seeking a Governance, Risk & Compliance (GRC) Analyst to support the firm's information security, vendor risk management, and compliance initiatives. This role serves as a key resource for client security assessments, vendor risk reviews, and audit support activities. The ideal candidate is a proactive problem solver with exceptional communication skills, strong organizational abilities, and a desire to grow within a dynamic and evolving security and compliance environment.

Responsibilities

• Manage client security assessments and serve as a primary point of contact for attorneys, clients, vendors, and external auditors.
• Coordinate third-party attestations and audits.
• Maintain compliance documentation and review vendor security risks.
• Assist with the development and ongoing maintenance of information security policies and procedures.
• Manage multiple concurrent projects and communicate complex compliance concepts to a variety of audiences.
• Proactively identify and address risk gaps while delivering exceptional client service.

Requirements

• Bachelor's degree in information security, Cybersecurity, Business, Risk Management, or a related field preferred.
• Two or more years of experience in governance, risk, compliance, vendor risk management, audit support, or a related function.

Qualifications

• Experience supporting client security assessments, third-party audits, vendor risk reviews, or compliance programs preferred.
• Experience with compliance frameworks, client security assessments, or third-party risk management is preferred, though training will be provided for candidates with relevant transferable experience.
• Security+, CISSP, CRISC, ISO 27001 Lead Auditor, or related certifications preferred.

Skills

• Excellent written and verbal communication skills.
• Strong time management abilities and a self-motivated approach to work.
• Desire to expand knowledge within a collaborative team environment.