IT Risk & Compliance Lead - Third-Party Security (Hybrid)

Greenberg Traurig, PA; United States; Hybrid; USD 90,000 - 150,000; Full time

Job summary

Greenberg Traurig, PA is seeking an IT Risk and Compliance Analyst to lead the firm’s third-party risk management program. The role involves evaluating vendor risks, performing due diligence, and collaborating with the security team to enhance information security and resilience across offices on a hybrid basis.

The ideal candidate will have strong analytical and communication skills, experience with compliance issues related to sensitive data, and the ability to operate independently in a

Qualifications

• Understanding information security concepts, IT and third-party risk management practices.
• Experience handling compliance issues involving sensitive data preferred.
• Strong analytical and problem-solving abilities with sound judgment.
• Excellent interpersonal, written and verbal communication across all levels of the organization.

Responsibilities

• Lead third-party risk management design, development, and governance.
• Perform vendor information security due diligence and assess controls.
• Conduct risk assessments for vendor relationships and client inquiries (RFPs).
• Collaborate with teams to communicate risk findings and provide recommendations to management.
• Develop and monitor KPI/KRI for the third-party risk program and ensure policy updates.

Skills

IS concepts

Compliance issues

Analytical skills

Interpersonal skills

Communication skills

Project management

Multitasking

Independent work

Job description

Greenberg Traurig, PA is seeking an IT Risk and Compliance Analyst to lead the firm’s third-party risk management program. The role involves evaluating vendor risks, performing due diligence, and collaborating with the security team to enhance information security and resilience across offices on a hybrid basis.

The ideal candidate will have strong analytical and communication skills, experience with compliance issues related to sensitive data, and the ability to operate independently in a