GRC Analyst - Hybrid: Risk, Compliance & Security

Benesch Law; Cleveland (OH); Hybrid; USD 99,000 - 120,000; Full time

Benefits offered by this job

Discretionary bonus

Comprehensive benefits package

Job summary

Benesch in Cleveland is seeking a GRC Analyst to join its expanding security team. You will drive governance, risk, and compliance activities across the firm, working with stakeholders to implement controls and ensure regulatory alignment.

The role requires 6+ years of information security experience, familiarity with ISO 27001, CIS, NIST CSF/800-53, and proficiency with GRC tools; a strong communicator who can translate technical controls into business context.

Qualifications

• Six+ years in information security with governance, risk, and compliance experience.
• Familiarity with ISO 27001, CIS, NIST CSF/800-53, GDPR, and HIPAA is preferred.
• Experience supporting audits and regulatory examinations is a plus.

Responsibilities

• Develops and maintains security and compliance policies and procedures.
• Leads third-party risk management activities and vendor assessments.
• Supports internal/external audits by coordinating evidence collection.
• Produces risk and compliance reports and dashboards.

Skills

Analytical thinking

Documentation skills

Stakeholder management

Communication

Education

Bachelor's degree in Information Security, IT, or related field

CISA

CRISC

CGRC

Security+

ISO 27001 Internal Auditor

CISM

Tools

SIG

Archer

OneTrust

LogicGate

ZenGRC

Job description

Benesch in Cleveland is seeking a GRC Analyst to join its expanding security team. You will drive governance, risk, and compliance activities across the firm, working with stakeholders to implement controls and ensure regulatory alignment.

The role requires 6+ years of information security experience, familiarity with ISO 27001, CIS, NIST CSF/800-53, and proficiency with GRC tools; a strong communicator who can translate technical controls into business context.