Hybrid GRC & Risk Analyst - Policy & Compliance

Benesch, Friedlander, Coplan & Aronoff; Chicago (IL); Hybrid; USD 109,000 - 131,000; Full time

Benefits offered by this job

Hybrid schedule

Comprehensive benefits

Job summary

Benesch, Friedlander, Coplan & Aronoff in Chicago seeks a GRC Analyst with 6+ years of governance, risk, and compliance experience to support internal governance, policy development, and controls across the organization.

You will work with governance, risk, and compliance teams, utilize GRC tools, and assist with audits, reporting, and awareness programs. The role offers a hybrid work arrangement and a comprehensive benefits package.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, IT, Business, or related field plus 6+ years of experience.
• Knowledge of ISO 27001, CIS, NIST CSF/800-53, GDPR, HIPAA, PCI and related compliance frameworks; strong documentation and communication skills.
• Certifications such as CISA, CRISC, CGRC, Security+, ISO 27001 Internal Auditor, or CISM preferred; experience supporting audits or risk assessments.

Responsibilities

• Develops, maintains, and updates security and compliance policies, standards, and procedures.
• Leads third-party risk management activities, including vendor assessments and evidence reviews.
• Supports internal/external audits by collecting, validating, and maintaining evidence.

Skills

GRC knowledge

Risk management

Policy development

Security governance

Education

Bachelor's degree in Information Security

Tools

SIG

Archer

OneTrust

LogicGate

ZenGRC

Job description

Benesch, Friedlander, Coplan & Aronoff in Chicago seeks a GRC Analyst with 6+ years of governance, risk, and compliance experience to support internal governance, policy development, and controls across the organization.

You will work with governance, risk, and compliance teams, utilize GRC tools, and assist with audits, reporting, and awareness programs. The role offers a hybrid work arrangement and a comprehensive benefits package.