IT Risk & GRC Analyst

Holland & Knight; Tampa (FL); On-site; USD 85,000 - 110,000; Full time

Benefits offered by this job

Medical, dental and vision plans

401(k) and profit-sharing

Paid holidays and leave for new parents

Job summary

Holland & Knight in Tampa, FL seeks an IT Enterprise Risk Analyst to manage the firm's GRC and IT risk programs with a focus on information security. The candidate will support policy development, conduct risk assessments, and manage third-party security due diligence.

The ideal applicant will hold a Bachelor's degree in information security or a related field and have at least three years of relevant experience. They will also possess strong communication skills and familiarity with ISO standards.

Qualifications

• Bachelor’s degree in information security, technology risk management, or relevant field.
• 3+ years of experience in GRC, information security, or risk management.
• Working knowledge of ISO/IEC27000 family and NIST CSF.

Responsibilities

• Support development and maintenance of information security policies.
• Conduct risk assessments for applications and infrastructure.
• Perform third-party security due diligence based on vendor criticality.

Skills

Strong written and verbal communication skills

Strong organizational skills

Knowledge of Microsoft Office Suite or Microsoft365

Education

Bachelor’s degree in information security or equivalent

3+ years of experience in information security

Certifications: ISACA CRISC and/or CISA

Job description

Holland & Knight in Tampa, FL seeks an IT Enterprise Risk Analyst to manage the firm's GRC and IT risk programs with a focus on information security. The candidate will support policy development, conduct risk assessments, and manage third-party security due diligence.

The ideal applicant will hold a Bachelor's degree in information security or a related field and have at least three years of relevant experience. They will also possess strong communication skills and familiarity with ISO standards.