Information Governance, Risk & Compliance Analyst

Fried, Frank, Harris, Shriver & Jacobson LLP; New York (NY); Vor Ort; USD 110.000 - 125.000; Vollzeit

Zusammenfassung

Fried Frank seeks an Information Governance (IG), Risk, and Compliance Analyst to test, evidence, and report on controls behind the firm’s IG, risk, compliance, and information security programs. You will run recurring control audits and produce artifacts relied upon in client audits and internal assurance work.

Based in New York, you will collect evidence programmatically with PowerShell, Microsoft Graph, and KQL, maintain inventories of data assets in Microsoft 365, and help map requests to

Qualifikationen

• 3–5 years of hands‑on experience in IG, compliance, IT audit, or information security.
• Experience running control tests or access reviews.
• Proficiency with PowerShell and KQL; ability to query platform audit logs.

Aufgaben

• Develop IG policies and translate them into enforceable technical configurations and measurable controls.
• Maintain an auditable inventory of data assets across Microsoft 365 and other repositories with classification, ownership, location, and retention state.
• Contribute to risk assessments and track remediation to closure.
• Support compliance with client obligations, regulations, and data protection laws by implementing and evidencing controls.
• Serve as technical respondent for client audits and security questionnaires, mapping requests to controls.

Kenntnisse

Analytical skills

Communication skills

PowerShell

KQL

Ausbildung

Bachelor's degree in a relevant field

IT audit certifications (e.g., CISA)

Tools

PowerShell

KQL

Jobbeschreibung

Fried Frank seeks an Information Governance (IG), Risk, and Compliance Analyst to test, evidence, and report on controls behind the firm’s IG, risk, compliance, and information security programs. You will run recurring control audits and produce artifacts relied upon in client audits and internal assurance work.

Based in New York, you will collect evidence programmatically with PowerShell, Microsoft Graph, and KQL, maintain inventories of data assets in Microsoft 365, and help map requests to