Remote GRC Lead: Information Security & Compliance

O'Melveny & Myers LLP; Beverly Hills (CA); Remote; USD 125,000 - 165,000; Full time

Job summary

O’Melveny & Myers LLP is seeking an Information Security Governance, Risk and Compliance (GRC) Lead. This role can be remote or based in any U.S. office, with Century City as one option.

The GRC Lead drives firmwide GRC initiatives, tracks risks, and enforces cyber policy across business units. Requirements include ISO 27001 knowledge, extensive GRC experience, and strong cross-functional collaboration. The position offers a competitive salary and comprehensive benefits within a hybrid/remote

Qualifications

• Five years of experience in GRC or a cybersecurity practitioner, including roles in security analysis, compliance, and risk management.
• Experience working in a distributed and hybrid office team.
• ISO/IEC 27001 required; NIST, HIPAA, HITRUST, GDPR optional.
• Bachelor's degree in Cybersecurity, Computer Science, Data Science, or related field.
• Professional certifications are a plus (CISSP, CISM, CISA, CRISC or CGRC).

Responsibilities

• Lead firmwide Information Security GRC initiatives in partnership with the Information Security team.
• Assist and coordinate ISO 27001 re-certifications, as well as client audits.
• Oversee Information Security GRC activities and coordinate with the Information Security Officer.
• Develop a cohesive Information Security GRC program with IT, legal, finance and operations.
• Coordinate with stakeholders to implement risk mitigation strategies.
• Document, communicate and enforce cybersecurity standards.

Skills

GRC experience

Cybersecurity

Risk management

Security analysis

Regulatory awareness

Education

Bachelor's degree – cybersecurity/CS/DS

Job description

O’Melveny & Myers LLP is seeking an Information Security Governance, Risk and Compliance (GRC) Lead. This role can be remote or based in any U.S. office, with Century City as one option.

The GRC Lead drives firmwide GRC initiatives, tracks risks, and enforces cyber policy across business units. Requirements include ISO 27001 knowledge, extensive GRC experience, and strong cross-functional collaboration. The position offers a competitive salary and comprehensive benefits within a hybrid/remote