Governance Risk and Compliance Analyst

Polsinelli; Kansas City (MO); Remote; USD 100,000 - 120,000; Full time

Benefits offered by this job

Paid time off

Medical insurance and benefits

Dental insurance

Vision insurance

Life insurance

AD&D insurance

ID Theft insurance

Long-term disability benefits

Short-term disability benefits

Parking/Transit reimbursement

401(k) benefits

Employee assistance benefits

Job summary

Polsinelli in Kansas City is hiring a Governance, Risk & Compliance Engineer to support information governance, security, and regulatory programs. The role can be done remotely, though Kansas City is preferred, with collaboration across multiple teams.

You will review Outside Counsel Guidelines, complete security questionnaires, and help drive a multi-year data governance roadmap while advising business units on risk and control considerations.

Qualifications

• Bachelor’s degree in MIS, CS, or related field, or equivalent work experience.
• Strong knowledge of risk and controls with COSO, COBIT, ISO, NIST and ITIL.
• Ability to manage multiple tasks in a changing environment.
• Experience with information security risk assessments and audits.

Responsibilities

• Participate in information and data governance activities and reviews.
• Review Outside Counsel Guidelines to meet client security requirements and document the review.
• Complete client security questionnaires in a timely manner.
• Support a multi-year roadmap to enhance data governance capabilities.
• Advise on information governance for legal and regulatory compliance.
• Monitor policy compliance and assess data handling risks.
• Collaborate across teams to drive security and compliance initiatives.
• Advise business units on information security risk and acceptable mitigations.
• Provide metrics, evidence, and leadership-ready recommendations.
• Maintain up-to-date knowledge of governance practices and regulations.

Skills

Risk management

Information security

COSO/COBIT/ISO/NIST/ITIL

Education

MIS/CS degree or equivalent

Job description

Polsinelli does not accept unsolicited resumes from search firms or agencies. Please, no phone calls or emails.

At Polsinelli,What a Law Firm Should Be is not just our tagline, it is what we live every day. We strive to create an environment where our team members are encouraged to bring their creativity and professional passions into the workplace so that they can thrive. Are you a people person who has a keen eye for detail, thrives in a professional environment and wants to be part of a dynamic team? We have the perfect role for an engaging professional like you!

Polsinelli is hiring a Governance Risk & Compliance Engineer for any of our offices, with the option to work remotely. However, our preference is for this role to be based in Kansas City.

CORE RESPONSIBILITIES

• Participate in activities associated with Polsinelli’s information and data governance programs.
• Perform reviews of Outside Counsel Guidelines to ensure that the Firm meets or exceeds client security requirements and completes the appropriate forms documenting the review.
• Complete client security questionnaires in a timely manner.
• Supporting the execution of a multi-year roadmap to enhance Polsinelli’s data governance capabilities.
• Conduct analysis and advise on information governance topics related to legal and regulatory compliance.
• Monitor compliance with data governance policies and standards and assess potential risks associated with data handling.
• Collaborate and drive security/compliance initiatives, working with people across multiple teams.
• Enable the business and other stakeholders to make risk-aware decisions by advising business units and technology leaders of the information security risks and proposing acceptable risk treatment options and alternatives.
• Support the information security and data governance program efforts through the collection of performance indicators, metrics, and other evidence and communicating relevant, succinct, and actionable recommendations to leadership.
• Proactively maintain a current and working understanding of information and data governance best practices, the practical application of data security governance concepts, relevant information security, and technology regulations and industry trends.
• Maintain a current and working understanding of relevant information governance and regulations and industry trends, and assist in the development of Polsinelli Data Governance, Information Security and Privacy Policies and the practical application of the Policies.
• Manage multiple simultaneous workstreams supporting disparate stakeholders, providing appropriate and timely communication of issues, concerns, risks, and status. Maintain the ability to refocus on newer tasks that take precedence over the existing tasks.

Employees approved for flexible work arrangements are expected to be available and maintain a practice of reliable, consistent attendance always during the employees scheduled work shift including, but not limited to, Zoom, email and voicemail, and by phone. Installation of Zoom on a cell phone is a requirement for the Information Security team.

REQUIREMENTS

• Bachelor’s degree in Management Information Systems (MIS), Computer Science, a related discipline, OR equivalent work experience.
• Strong knowledge of risk and controls, including working knowledge of standards and frameworks such as COSO, COBIT, ISO, NIST, and ITIL.
• Ability to thrive in an environment of change and manage multiple tasks and responsibilities simultaneously.
• Practical experience with information security risk assessments and information security audits.

“BONUS POINTS”

• You have Information Governance Professional (IGP) and/or Certified Information Professional (CIP) certifications, Third Party Risk Management Practitioner (TPRMP)
• You have experience in the Legal industry.
• You have strong understanding of information security regulatory requirements and best practices.

The budgeted salary range for this position is $100,000 - $120,000.

• Paid time off
• sick time off
• a referral program
• medical insurance and benefits
• dental insurance
• vision insurance
• life insurance
• AD&D insurance
• ID Theft insurance
• long-term disability benefits
• short-term disability benefits
• Parking/Transit reimbursement (varies depending on location)
• 401(k) benefits
• employee assistance benefits

Polsinelli PC is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law.

Behaviors

Preferred

Team Player : Works well as a member of a group

Loyal : Shows firm and constant support to a cause

Detail Oriented : Capable of carrying out a given task with all details necessary to get the task done well

Dedicated : Devoted to a task or purpose with loyalty or integrity

Motivations

Preferred

Self-Starter : Inspired to perform without outside help

Flexibility : Inspired to perform well when granted the ability to set your own schedule and goals

Ability to Make an Impact : Inspired to perform well by the ability to contribute to the success of a project or the organization

Education

Required

Bachelor's or better in Computer Science or related field.

Bachelor's or better in Management Information Systems or related field.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.