InfoSec GRC Lead: ISO 27001, Risk & Compliance

O'Melveny & Myers LLP; Houston (TX); À distance; USD 120 000 - 180 000; Plein temps

Résumé du poste

O’Melveny & Myers LLP is seeking an Information Security Governance, Risk and Compliance (GRC) Lead for a remote-capable role based in any U.S. office, with the Houston application focus.

The role develops and coordinates the firm’s GRC program, tracking risks, reporting to leadership, and ensuring regulatory alignment across ISO 27001, NIST, GDPR, HIPAA, and related standards. The GRC Lead collaborates with IT, legal, finance and operations to implement controls, conducts risk assessments, and

Qualifications

• Five years of experience in GRC or cybersecurity roles including security analysis, compliance, and risk management.
• Experience in distributed and hybrid office environments.
• Familiarity with ISO/IEC 27001, NIST, HIPAA, HITRUST, GDPR, GLBA.

Responsabilités

• Lead firmwide Information Security GRC initiatives with the Security team.
• Coordinate ISO 27001 recertifications and client audits.
• Track information security risks and conduct risk analyses with mitigation options.
• Develop and maintain GRC policies, standards, processes and controls.
• Oversee third-party risk management and vendor risk monitoring.
• Coordinate audits and assessments with clients and external auditors.
• Provide guidance to leadership on GRC matters and regulatory changes.
• Produce timely GRC reports for management and maintain audit readiness.

Connaissances

GRC Leadership

Cybersecurity

ISO 27001

NIST

HIPAA

GDPR

HITRUST

GLBA

Formation

Bachelor's degree in Cybersecurity, Computer Science, Data Science, or related field

Description du poste

O’Melveny & Myers LLP is seeking an Information Security Governance, Risk and Compliance (GRC) Lead for a remote-capable role based in any U.S. office, with the Houston application focus.

The role develops and coordinates the firm’s GRC program, tracking risks, reporting to leadership, and ensuring regulatory alignment across ISO 27001, NIST, GDPR, HIPAA, and related standards. The GRC Lead collaborates with IT, legal, finance and operations to implement controls, conducts risk assessments, and