Remote GRC Lead: Information Security & Compliance

O'Melveny & Myers LLP; Washington (District of Columbia); Remote; USD 125,000 - 165,000; Full time

Job summary

O’Melveny & Myers LLP is seeking a senior Information Security GRC Lead to drive firmwide governance, risk and compliance initiatives. The role collaborates with the Information Security Officer to implement controls, coordinate ISO 27001 programs, and manage third‑party risk with a proactive risk management mindset.

Remote work is allowed for this U.S. position with eventual alignment to Washington, DC, or other offices.

Qualifications

• Five years of experience in GRC or cybersecurity roles.
• Experience in security analysis, compliance and risk management.
• Familiar with ISO/IEC 27001 and related standards.
• Experience coordinating audits and third-party risk assessments.
• Bachelor's degree required in cybersecurity, CS, or related field.
• Excellent written and verbal communication skills.

Responsibilities

• Lead firmwide Information Security GRC initiatives with the Security team.
• Coordinate ISO 27001 re-certifications and client audits.
• Track and respond to outside counsel guidelines reviews.
• Oversee third-party and vendor risk management.
• Develop and enforce a comprehensive GRC program with policies and controls.
• Provide leadership for risk assessments and mitigation strategies.
• Report GRC metrics to senior management.

Skills

GRC experience

Cybersecurity

Risk management

ISO/IEC 27001

Regulatory compliance

Education

Bachelor's degree in Cybersecurity or related field

Job description

O’Melveny & Myers LLP is seeking a senior Information Security GRC Lead to drive firmwide governance, risk and compliance initiatives. The role collaborates with the Information Security Officer to implement controls, coordinate ISO 27001 programs, and manage third‑party risk with a proactive risk management mindset.

Remote work is allowed for this U.S. position with eventual alignment to Washington, DC, or other offices.