Remote Information Security GRC Lead

O'Melveny & Myers LLP; United States; Remote; USD 125,000 - 165,000; Full time

Job summary

O’Melveny & Myers LLP seeks an Information Security Governance, Risk and Compliance Lead to drive firmwide GRC initiatives. The role can be remote or based in any U.S.

office and reports to the Information Security Officer, overseeing policies, controls, risk analyses, audits and third-party risk management. You will develop and advance a comprehensive GRC framework, track metrics for management, coordinate ISO 27001 activities, stay abreast of NIST, HIPAA, GDPR requirements, and mentor

Qualifications

• Five years of experience in GRC or cybersecurity roles.
• Experience in distributed and hybrid office environments.
• Understanding of ISO/IEC 27001, NIST, HIPAA, GDPR.
• Strong analytical, communication and leadership skills.

Responsibilities

• Lead firmwide Information Security GRC initiatives in partnership with the Information Security team.
• Coordinate ISO 27001 annual re-certifications and client audits.
• Develop, implement and coordinate GRC policies, standards, processes and controls.
• Oversee third-party risk and vendor risk programs.
• Deliver GRC reports to management and assist with audits and regulatory reviews.
• Collaborate with IT, legal, finance and operations to strengthen security governance and risk management.

Skills

GRC expertise

Cybersecurity

Risk management

ISO 27001

Regulatory compliance

Communication skills

Education

Bachelor's degree in Cybersecurity/CS/Data Science or related field

Tools

GRC software

Job description

O’Melveny & Myers LLP seeks an Information Security Governance, Risk and Compliance Lead to drive firmwide GRC initiatives. The role can be remote or based in any U.S.

office and reports to the Information Security Officer, overseeing policies, controls, risk analyses, audits and third-party risk management. You will develop and advance a comprehensive GRC framework, track metrics for management, coordinate ISO 27001 activities, stay abreast of NIST, HIPAA, GDPR requirements, and mentor