GRC Analyst: InfoSec, Vendor Risk & Compliance

Nelson Mullins Riley & Scarborough LLP; Charleston (SC); On-site; USD 70,000 - 100,000; Full time

Job summary

Nelson Mullins Riley & Scarborough LLP seeks a Governance, Risk & Compliance (GRC) Analyst to support the firm's information security, vendor risk management, and compliance initiatives. You will serve as a key resource for client security assessments, vendor risk reviews, and audit support activities.

The ideal candidate is a proactive problem solver with strong communication, organization, and a desire to grow within a dynamic security and compliance environment.

Qualifications

• Bachelor's degree in information security, cybersecurity, business, risk management, or related field preferred.
• Two or more years of experience in governance, risk, compliance, vendor risk management, audit support, or related function.
• Experience supporting client security assessments, third-party audits, vendor risk reviews, or compliance programs preferred.
• Security+, CISSP, CRISC, ISO 27001 Lead Auditor, or related certifications preferred.

Responsibilities

• Manage client security assessments and vendor risk reviews.
• Coordinate third-party attestations and audits and maintain compliance documentation.
• Assist with development and maintenance of information security policies and procedures and support audits.

Skills

Governance risk compliance

Information security

Vendor risk management

Audit support

Client service

Education

Bachelor's degree in information security / cybersecurity / related field

2+ years experience in GRC, information security, or related function

Security+ / CISSP / CRISC / ISO 27001 Lead Auditor or related certifications

Job description

Nelson Mullins Riley & Scarborough LLP seeks a Governance, Risk & Compliance (GRC) Analyst to support the firm's information security, vendor risk management, and compliance initiatives. You will serve as a key resource for client security assessments, vendor risk reviews, and audit support activities.

The ideal candidate is a proactive problem solver with strong communication, organization, and a desire to grow within a dynamic security and compliance environment.