GRC Analyst: InfoSec, Vendor Risk & Audits

Nelson Mullins Riley & Scarborough; Columbia (SC); On-site; USD 70,000 - 100,000; Full time

Job summary

Nelson Mullins Riley & Scarborough is seeking a Governance, Risk & Compliance (GRC) Analyst to support the firm's information security, vendor risk management, and compliance initiatives. The role involves managing client security assessments, vendor risk reviews, and audits, while serving as a key contact for attorneys, clients, vendors, and external auditors.

The ideal candidate will have experience in governance, risk, and compliance functions, strong communication skills, and a

Qualifications

• Bachelor's degree in information security, Cybersecurity, Business, Risk Management, or a related field preferred.
• Two or more years of experience in governance, risk, compliance, vendor risk management, audit support, or a related function.
• Experience supporting client security assessments, third-party audits, vendor risk reviews, or compliance programs preferred.
• Security+, CISSP, CRISC, ISO 27001 Lead Auditor, or related certifications preferred.

Responsibilities

• Manage client security assessments, vendor risk reviews, and compliance-related initiatives.
• Serve as primary contact for attorneys, clients, vendors, and external auditors.
• Coordinate third-party attestations and audits; maintain compliance documentation.
• Review vendor security risks and assist with development and maintenance of information security policies and procedures.
• Manage multiple concurrent projects and communicate complex compliance concepts to diverse audiences.

Skills

Communication skills

Project management

Risk management

Information security basics

Education

Bachelor's degree in information security or related field

Job description

Nelson Mullins Riley & Scarborough is seeking a Governance, Risk & Compliance (GRC) Analyst to support the firm's information security, vendor risk management, and compliance initiatives. The role involves managing client security assessments, vendor risk reviews, and audits, while serving as a key contact for attorneys, clients, vendors, and external auditors.

The ideal candidate will have experience in governance, risk, and compliance functions, strong communication skills, and a