GRC & Data Privacy Security Engineer - Remote

Orrick, Herrington & Sutcliffe LLP; United States; Hybrid; USD 63,000 - 88,000; Full time

Job summary

Orrick, Herrington & Sutcliffe LLP is seeking an IT Security Engineer for Governance, Risk & Compliance, Data Protection and Privacy Support. The role supports client audits, third‑party assessments and privacy initiatives under senior guidance.

The position can be based in any US office or remote within the US. Ideal for candidates with 1–2 years in information security, foundational cybersecurity knowledge, and a keen interest in legal and financial services.

Qualifications

• 1–2 years of experience in information security or security support role.
• Foundational knowledge of cybersecurity, data protection, and privacy concepts.
• Experience assisting with audits or assessments preferred but not required.
• Interest in legal, financial, or business services industries is a plus.
• Basic understanding of Access Control Management and encryption concepts.
• Demonstrated project management skills: coordinate tasks, track deliverables, and manage multiple projects.

Responsibilities

• Assist in maintaining enterprise security documents (policies, standards, baselines, guidelines, procedures).
• Help test and update the firm’s Incident Response Plan.
• Support ISO 27001 Certification through documentation and evidence collection.
• Participate in client audits and third‑party supplier security assessments; gather information and prepare responses.
• Provide administrative and technical support for GRC compliance projects.
• Assist in implementing data protection and privacy strategies as directed by senior engineers.

Skills

Network security tools

Cybersecurity fundamentals

Audits & assessments support

Project management

Communication skills

Time management

Education

Associate/Bachelor's degree in CS or cybersecurity

Security+ or Microsoft Certifications (preferred)

Tools

Security tools

Job description

Orrick, Herrington & Sutcliffe LLP is seeking an IT Security Engineer for Governance, Risk & Compliance, Data Protection and Privacy Support. The role supports client audits, third‑party assessments and privacy initiatives under senior guidance.

The position can be based in any US office or remote within the US. Ideal for candidates with 1–2 years in information security, foundational cybersecurity knowledge, and a keen interest in legal and financial services.