Info Governance, Risk & Compliance Analyst

Fried Frank; New York (NY); On-site; USD 110,000 - 125,000; Full time

Job summary

Fried Frank in New York is seeking an Information Governance, Risk, and Compliance Analyst to test, evidence, and report on controls behind the firm's IG, risk, compliance, and information security programs. You will run recurring control audits, build queries with PowerShell, Microsoft Graph, and KQL, and produce artifacts relied upon in client audits and internal assurance work.

Responsibilities include developing IG policies, maintaining inventories across Microsoft 365, supporting risk

Qualifications

• Bachelor's degree in a relevant field.
• 3–5 years of hands-on IG, compliance, IT audit, or information security experience.
• Certifications such as CISA, SC-400, SC-200 are a plus.

Responsibilities

• Plan and execute recurring control audits across Microsoft 365, Entra ID, AD, and approved repositories.
• Collect evidence programmatically with PowerShell, Graph, and KQL.
• Test control effectiveness and validate data classification, retention, and DLP controls.
• Respond to client audits, security questionnaires, and regulatory inquiries.

Skills

PowerShell

KQL

Microsoft 365

Entra ID

Active Directory

Education

Bachelor's degree in a relevant field

Job description

Fried Frank in New York is seeking an Information Governance, Risk, and Compliance Analyst to test, evidence, and report on controls behind the firm's IG, risk, compliance, and information security programs. You will run recurring control audits, build queries with PowerShell, Microsoft Graph, and KQL, and produce artifacts relied upon in client audits and internal assurance work.

Responsibilities include developing IG policies, maintaining inventories across Microsoft 365, supporting risk