GRC Analyst: Shape Policy, Risk & Compliance

Ice Miller LLP; Philadelphia (Philadelphia County); On-site; USD 75,000 - 100,000; Full time

Benefits offered by this job

Health insurance

Vision and Dental Insurance

401k (employer match)

Life insurance

Job summary

Ice Miller LLP is seeking a GRC Analyst to leverage knowledge of security policies, standards, controls, and industry best practices. This role consults with teams and informs on risk to systems and data, ensuring GRC functions are integrated into firm programs and that risk mitigation is effective.

Minimum requirements include familiarity with HIPAA, PCI DSS, ISO2700x, and NIST frameworks, plus strong written and verbal communication.

Qualifications

• Understanding of security regulations (HIPAA, PCI, ISO27001).
• Familiarity with common security frameworks (NIST CSF, NIST SP 800-53, HITRUST).
• Experience documenting risk and compliance activities.
• Ability to communicate complex security topics to varied audiences.
• Proficiency in incident response playbooks and tabletop exercises.

Responsibilities

• Governance: develop and manage security policies, standards, procedures aligned to NIST and CIS.
• Assess platforms against security standards and coordinate remediation with security staff.
• Interface with security personnel to align expectations and actions.
• Collaborate with IT to identify and remediate cybersecurity risks promptly.
• Develop information security awareness and training related to governance changes.
• Evaluate policy exceptions and manage identity governance activities.
• Handle audit findings, regulatory input, and compliance requirements.
• Oversee data transfers and ethical walls as needed.
• Risk: measure and monitor cybersecurity risk; manage risk exception queues.
• Perform risk assessments and support business impact analyses.
• Develop cyber resilience plans including incident response and disaster recovery.
• Participate in Third Party Risk Management activities.
• Compliance: monitor regulations and changes impacting information security policies.
• Support internal and external audits and security questionnaires.
• Advise management on regulatory impacts and key risks.

Skills

GRC knowledge

NIST CSF

Risk assessment

Policy development

Incident response

Tools

NIST 800-53

CIS controls

Job description

Ice Miller LLP is seeking a GRC Analyst to leverage knowledge of security policies, standards, controls, and industry best practices. This role consults with teams and informs on risk to systems and data, ensuring GRC functions are integrated into firm programs and that risk mitigation is effective.

Minimum requirements include familiarity with HIPAA, PCI DSS, ISO2700x, and NIST frameworks, plus strong written and verbal communication.