Remote GRC Lead, Information Security & Compliance

O'Melveny & Myers LLP; Menlo Park (CA); A distancia; USD 125.000 - 165.000; Jornada completa

Descripción de la vacante

O’Melveny & Myers LLP seeks a seasoned Information Security GRC Lead to drive governance, risk and compliance across firmwide information security initiatives. You will work closely with the Information Security Officer to develop, implement and monitor GRC programs, policies and controls. Remote work is permitted, with office options in multiple U.S.

locations. The role requires deep expertise in ISO/IEC 27001, risk management methodologies, and cross-functional collaboration to ensure

Formación

• 5 years of experience in GRC or cybersecurity roles.
• Experience in distributed/hybrid office environments.
• Bachelor's degree in cybersecurity, CS, data science, or related field.
• Professional certifications are a plus (CISSP, CISM, CISA, CRISC or CGRC).

Responsabilidades

• Lead firmwide Information Security GRC initiatives in partnership with the Information Security team.
• Coordinate ISO 27001 annual re-certifications, as well as with client audits.
• Track information security risks and report to leadership; manage third‑party risk program.
• Oversee GRC activities and coordinate with Information Security Officer.
• Develop and enforce a cohesive GRC program across IT, legal, finance and operations.

Conocimientos

GRC experience

ISO27001

NIST knowledge

HIPAA knowledge

Communication skills

Leadership

Educación

Bachelor's degree in Cybersecurity, CS, Data Science, or related field

Descripción del empleo

O’Melveny & Myers LLP seeks a seasoned Information Security GRC Lead to drive governance, risk and compliance across firmwide information security initiatives. You will work closely with the Information Security Officer to develop, implement and monitor GRC programs, policies and controls. Remote work is permitted, with office options in multiple U.S.

locations. The role requires deep expertise in ISO/IEC 27001, risk management methodologies, and cross-functional collaboration to ensure