InfoSec GRC Analyst: Risk & Compliance

Barnes & Thornburg LLP; Indianapolis (IN); Presencial; USD 90 000 - 120 000; Tempo integral

Resumo da oferta

Barnes & Thornburg LLP is seeking an Information Security GRC Analyst to join the Information Security team in Indianapolis. The role focuses on measuring, prioritizing, and maintaining technology risks in the risk register, under the guidance of the Governance Manager.

The analyst will analyze, document, and track risks across business operations, support ISO 27001/27701 aligned ISMS/PIMS, and assist with audits, client questionnaires, and vendor risk management.

Qualificações

• Bachelor’s degree or equivalent experience.
• 2 years of IT, risk management, or information security experience.
• Familiarity with ISO 27001, SOC 2, and risk management concepts.
• Basic understanding of IT concepts and security principles.
• Strong Excel data analysis and reporting skills.

Responsabilidades

• Serve as a point of contact for technology-related risk questions and escalate as needed.
• Support risk assessments, policy/documentation management, third‑party risk management, and ISMS operations.
• Maintain the Information Security Risk Register and assist with risk reporting to executives.
• Assist IT risk assessments for on‑premises and cloud infrastructure, platforms, and services.
• Track exceptions/waivers related to security standards and policies.
• Support ISMS/PIMS operations in alignment with ISO 27001/27701 and related controls.
• Participate in vendor security reviews and client security content for RFPs and contracts.

Conhecimentos

Analytical skills

Communication skills

Collaboration

Formação académica

Bachelor’s degree or equivalent experience

Ferramentas

Microsoft Project

Asana

Trello

Descrição da oferta de emprego

Barnes & Thornburg LLP is seeking an Information Security GRC Analyst to join the Information Security team in Indianapolis. The role focuses on measuring, prioritizing, and maintaining technology risks in the risk register, under the guidance of the Governance Manager.

The analyst will analyze, document, and track risks across business operations, support ISO 27001/27701 aligned ISMS/PIMS, and assist with audits, client questionnaires, and vendor risk management.