GRC Analyst — Risk, Compliance & Security Governance

Ice Miller LLP; Baltimore (MD); On-site; USD 75,000 - 100,000; Full time

Benefits offered by this job

Health insurance

Paid time off

401k with employer match

Vision and dental insurance

Job summary

Ice Miller LLP is seeking a GRC Analyst to leverage security policies, standards, and controls, consulting across the firm and informing on risk to systems and data. You will help ensure GRC functions are embedded in key programs and validate that risk mitigation is effective.

The position involves governance, risk, and compliance activities across HIPAA, PCI, ISO2700x, NIST frameworks, and audits, with a focus on improving security controls and awareness throughout the organization.

Qualifications

• Understanding of HIPAA, Meaningful Use, PCI DSS, ISO2700x, FDA.
• Understanding of ISO2700x, NIST CSF, NIST SP 800-53, HITRUST.
• Familiarity with security auditing and risk assessment processes.
• Skills in documenting risk and compliance activities.
• Excellent written and verbal communication skills for technical and non-technical audiences.
• Proficient in incident response playbooks and tabletop exercises.
• Knowledge of cybersecurity risk management and governance.

Responsibilities

• Develop and manage cyber security policies, standards, procedures and governance.
• Assess platforms against security and configuration standards.
• Interface with security personnel to align remediation with best practices.
• Collaborate with IT to identify and address key cybersecurity risks.
• Develop and deploy information security awareness, training and communications.
• Evaluate exceptions to security policies and administer identity governance.
• Support internal and external audits and responses to security questionnaires.
• Provide guidance on regulatory impacts to management and stakeholders.

Skills

Regulatory compliance

Risk assessment

Information security governance

Policy development

Audit coordination

Education

Bachelor's degree in a related field

Job description

Ice Miller LLP is seeking a GRC Analyst to leverage security policies, standards, and controls, consulting across the firm and informing on risk to systems and data. You will help ensure GRC functions are embedded in key programs and validate that risk mitigation is effective.

The position involves governance, risk, and compliance activities across HIPAA, PCI, ISO2700x, NIST frameworks, and audits, with a focus on improving security controls and awareness throughout the organization.