GRC Analyst: Client-Focused Risk & Compliance

Nelson Mullins Riley & Scarborough LLP; Columbia (SC); On-site; USD 70,000 - 110,000; Full time

Job summary

Nelson Mullins Riley & Scarborough LLP is seeking a Governance, Risk & Compliance (GRC) Analyst to support information security, vendor risk management, and compliance initiatives. You will manage client security assessments, coordinate third-party audits, and maintain compliance documentation while serving as a primary contact for attorneys, clients, vendors, and external auditors.

The role requires proactive problem solving and strong communication skills.

Qualifications

• Bachelor's degree in information security, cybersecurity, business, risk management, or a related field.
• Two or more years of experience in governance, risk, compliance, vendor risk management, audit support, or related function.
• Experience supporting client security assessments, third-party audits, vendor risk reviews, or compliance programs preferred.

Responsibilities

• Manage client security assessments, vendor risk reviews and compliance initiatives; serve as a point of contact for attorneys, clients, vendors and external auditors.
• Coordinate third-party attestations and audits and maintain compliance documentation.
• Review vendor security risks and assist with development and maintenance of information security policies and procedures.
• Manage multiple projects, communicate complex compliance concepts to diverse audiences, and address risk gaps.
• Deliver exceptional client service while supporting governance and compliance objectives.

Skills

Communication skills

Time management

Self-motivated

Education

Bachelor's degree in information security, Cybersecurity, Business, Risk Management, or a related field

Tools

Security+

CISSP

CRISC

ISO 27001 Lead Auditor

Job description

Nelson Mullins Riley & Scarborough LLP is seeking a Governance, Risk & Compliance (GRC) Analyst to support information security, vendor risk management, and compliance initiatives. You will manage client security assessments, coordinate third-party audits, and maintain compliance documentation while serving as a primary contact for attorneys, clients, vendors, and external auditors.

The role requires proactive problem solving and strong communication skills.