GRC Lead: Information Security & Compliance (Remote)

O'Melveny & Myers LLP; Austin (TX); Remote; USD 140,000 - 190,000; Full time

Job summary

O’Melveny & Myers LLP is seeking an Information Security Governance, Risk and Compliance Lead to drive a firmwide GRC program. The role can be remote or based in a U.S. office, with a focus on coordinating risk, policy, and controls across the organization.

The GRC Lead will work with Information Security and business teams to implement risk-based controls, track regulatory changes, and prepare for audits and third-party assessments. Strong leadership and communication skills are essential.

Qualifications

• Five years of experience in GRC or as a cybersecurity practitioner.
• Experience in distributed and hybrid office environments.
• Understanding of ISO/IEC 27001, NIST, HIPAA, HITRUST, GDPR, GLBA (optional).
• Bachelor's degree in Cybersecurity, Computer Science, Data Science, or related field.
• Professional certifications are a plus (CISSP, CISM, CISA, CRISC or CGRC).

Responsibilities

• Lead firmwide Information Security GRC initiatives with Information Security team.
• Coordinate ISO 27001 certifications and client audits.
• Track regulatory requirements and maintain audit responses.
• Oversee third-party and vendor risk management within GRC.
• Develop and enforce policies, standards, and control frameworks.
• Provide management with timely GRC reports and metrics.

Skills

GRC

Cybersecurity

Risk management

Compliance

Regulatory knowledge

Education

Bachelor's degree in Cybersecurity/CS/related field

Job description

O’Melveny & Myers LLP is seeking an Information Security Governance, Risk and Compliance Lead to drive a firmwide GRC program. The role can be remote or based in a U.S. office, with a focus on coordinating risk, policy, and controls across the organization.

The GRC Lead will work with Information Security and business teams to implement risk-based controls, track regulatory changes, and prepare for audits and third-party assessments. Strong leadership and communication skills are essential.