Governance Risk & Compliance Analyst

Nelson Mullins Riley & Scarborough LLP; Columbia (SC); On-site; USD 70,000 - 110,000; Full time

Job summary

Nelson Mullins Riley & Scarborough LLP is seeking a Governance, Risk & Compliance (GRC) Analyst to support information security, vendor risk management, and compliance initiatives. You will manage client security assessments, coordinate third-party audits, and maintain compliance documentation while serving as a primary contact for attorneys, clients, vendors, and external auditors.

The role requires proactive problem solving and strong communication skills.

Qualifications

• Bachelor's degree in information security, cybersecurity, business, risk management, or a related field.
• Two or more years of experience in governance, risk, compliance, vendor risk management, audit support, or related function.
• Experience supporting client security assessments, third-party audits, vendor risk reviews, or compliance programs preferred.

Responsibilities

• Manage client security assessments, vendor risk reviews and compliance initiatives; serve as a point of contact for attorneys, clients, vendors and external auditors.
• Coordinate third-party attestations and audits and maintain compliance documentation.
• Review vendor security risks and assist with development and maintenance of information security policies and procedures.
• Manage multiple projects, communicate complex compliance concepts to diverse audiences, and address risk gaps.
• Deliver exceptional client service while supporting governance and compliance objectives.

Skills

Communication skills

Time management

Self-motivated

Education

Bachelor's degree in information security, Cybersecurity, Business, Risk Management, or a related field

Tools

Security+

CISSP

CRISC

ISO 27001 Lead Auditor

Job description

Overview

Nelson Mullins, an Am Law 100 law firm, is seeking a Governance, Risk & Compliance (GRC) Analyst to support the firm's information security, vendor risk management, and compliance initiatives. This role serves as a key resource for client security assessments, vendor risk reviews, and audit support activities. The ideal candidate is a proactive problem solver with exceptional communication skills, strong organizational abilities, and a desire to grow within a dynamic and evolving security and compliance environment

A Day in the Life

In this role, you will manage client security assessments, vendor risk reviews, and compliance-related initiatives while serving as a primary point of contact for attorneys, clients, vendors, and external auditors. You will coordinate third-party attestations and audits, maintain compliance documentation, review vendor security risks, and assist with the development and ongoing maintenance of information security policies and procedures. This position requires the ability to manage multiple concurrent projects, communicate complex compliance concepts to a variety of audiences, proactively identify and address risk gaps, and deliver exceptional client service while supporting the firm's governance and compliance objectives.

We Know You

The ideal candidate will have experience supporting governance, risk, compliance, information security, vendor management, audit support, or a related function. Candidates should demonstrate excellent written and verbal communication skills, strong time management abilities, a self-motivated approach to work, and a desire to expand their knowledge within a collaborative team environment. Experience with compliance frameworks, client security assessments, or third-party risk management is preferred, though training will be provided for candidates with relevant transferable experience.

• Bachelor's degree in information security, Cybersecurity, Business, Risk Management, or a related field preferred.
• Two or more years of experience in governance, risk, compliance, vendor risk management, audit support, or a related function.
• Experience supporting client security assessments, third-party audits, vendor risk reviews, or compliance programs preferred.
• Security+, CISSP, CRISC, ISO 27001 Lead Auditor, or related certifications preferred

Who We Are

With more than 1,000 attorneys, policy advisors, e-discovery professionals and other business professionals across offices in California, Colorado, the District of Columbia, Florida, Georgia, Illinois, Maryland, Massachusetts, Minnesota, New York, Ohio, Pennsylvania, Tennessee, Texas, West Virginia, and throughout North Carolina and South Carolina, Nelson Mullins has strong roots in the business community and an appreciation for new directions in the business world.