InfoSec Risk & Compliance Analyst

Holland & Knight; Miami (FL); On-site; USD 80,000 - 140,000; Full time

Job summary

Holland & Knight in Tampa, FL is seeking an IT Enterprise Risk Analyst to join our team. The role focuses on managing the Firm’s GRC and IT risk programs, with emphasis on information security for client data, attorney work, and privileged communications.

Responsibilities include developing and maintaining information security policies and standards, conducting risk assessments across applications, infrastructure, cloud services and core processes, managing the risk register, coordinating

Qualifications

• Experience implementing information security programs and governance.
• Ability to perform risk assessments across applications, infrastructure and cloud services.
• Familiarity with regulatory frameworks (ISO/NIST/CIS/SOC 2/HIPAA/GDPR).
• Experience coordinating third-party risk reviews and audits.

Responsibilities

• Policy, standards and governance support for information security and technology risk.
• Maintain policy lifecycle, map controls to ISO/NIST/CIS/SOC 2 and regulatory requirements.
• Conduct risk assessments for firm systems and core processes and maintain risk register.
• Coordinate third-party security due diligence and evidence collection for audits.

Skills

Information security

GRC

Risk assessment

Vendor risk management

Job description

Holland & Knight in Tampa, FL is seeking an IT Enterprise Risk Analyst to join our team. The role focuses on managing the Firm’s GRC and IT risk programs, with emphasis on information security for client data, attorney work, and privileged communications.

Responsibilities include developing and maintaining information security policies and standards, conducting risk assessments across applications, infrastructure, cloud services and core processes, managing the risk register, coordinating