Governance Risk & Compliance Analyst

Nelson Mullins Riley & Scarborough; Columbia (SC); On-site; USD 70,000 - 100,000; Full time

Job summary

Nelson Mullins Riley & Scarborough is seeking a Governance, Risk & Compliance (GRC) Analyst to support the firm's information security, vendor risk management, and compliance initiatives. The role involves managing client security assessments, vendor risk reviews, and audits, while serving as a key contact for attorneys, clients, vendors, and external auditors.

The ideal candidate will have experience in governance, risk, and compliance functions, strong communication skills, and a

Qualifications

• Bachelor's degree in information security, Cybersecurity, Business, Risk Management, or a related field preferred.
• Two or more years of experience in governance, risk, compliance, vendor risk management, audit support, or a related function.
• Experience supporting client security assessments, third-party audits, vendor risk reviews, or compliance programs preferred.
• Security+, CISSP, CRISC, ISO 27001 Lead Auditor, or related certifications preferred.

Responsibilities

• Manage client security assessments, vendor risk reviews, and compliance-related initiatives.
• Serve as primary contact for attorneys, clients, vendors, and external auditors.
• Coordinate third-party attestations and audits; maintain compliance documentation.
• Review vendor security risks and assist with development and maintenance of information security policies and procedures.
• Manage multiple concurrent projects and communicate complex compliance concepts to diverse audiences.

Skills

Communication skills

Project management

Risk management

Information security basics

Education

Bachelor's degree in information security or related field

Job description

Nelson Mullins, an Am Law 100 law firm, is seeking a Governance, Risk & Compliance (GRC) Analyst to support the firm's information security, vendor risk management, and compliance initiatives. This role serves as a key resource for client security assessments, vendor risk reviews, and audit support activities. The ideal candidate is a proactive problem solver with exceptional communication skills, strong organizational abilities, and a desire to grow within a dynamic and evolving security and compliance environment.

In this role, you will manage client security assessments, vendor risk reviews, and compliance-related initiatives while serving as a primary point of contact for attorneys, clients, vendors, and external auditors. You will coordinate third-party attestations and audits, maintain compliance documentation, review vendor security risks, and assist with the development and ongoing maintenance of information security policies and procedures. This position requires the ability to manage multiple concurrent projects, communicate complex compliance concepts to a variety of audiences, proactively identify and address risk gaps, and deliver exceptional client service while supporting the firm's governance and compliance objectives.

The ideal candidate will have experience supporting governance, risk, compliance, information security, vendor management, audit support, or a related function. Candidates should demonstrate excellent written and verbal communication skills, strong time management abilities, a self-motivated approach to work, and a desire to expand their knowledge within a collaborative team environment. Experience with compliance frameworks, client security assessments, or third-party risk management is preferred, though training will be provided for candidates with relevant transferable experience.

• Bachelor's degree in information security, Cybersecurity, Business, Risk Management, or a related field preferred.
• Two or more years of experience in governance, risk, compliance, vendor risk management, audit support, or a related function.
• Experience supporting client security assessments, third-party audits, vendor risk reviews, or compliance programs preferred.
• Security+, CISSP, CRISC, ISO 27001 Lead Auditor, or related certifications preferred.

With more than 1,000 attorneys, policy advisors, e-discovery professionals and other business professionals across offices in California, Colorado, the District of Columbia, Florida, Georgia, Illinois, Maryland, Massachusetts, Minnesota, New York, Ohio, Pennsylvania, Tennessee, Texas, West Virginia, and throughout North Carolina and South Carolina, Nelson Mullins has strong roots in the business community and an appreciation for new directions in the business world.