Remote Information Security GRC Lead | Risk & Compliance

O'Melveny & Myers LLP; San Francisco (CA); Remote; USD 125.000 - 165.000; Vollzeit

Zusammenfassung

O’Melveny & Myers LLP is seeking an Information Security GRC Lead in a role that can be remote or based in any U.S. office, with the San Francisco posting serving as the application location.

You will lead the firm’s GRC program, coordinate ISO 27001 activities and audits, and manage third‑party risk while reporting to the Information Security Officer. The position requires deep knowledge of GRC, risk management frameworks and regulatory compliance, plus strong collaboration with IT, legal

Qualifikationen

• Five years of experience in GRC or as a cybersecurity practitioner, including roles in security analysis, compliance and risk management.
• Experience working in a distributed and hybrid office team.
• Understanding of information security and privacy frameworks: ISO/IEC 27001 is required; NIST, HIPAA, HITRUST, GDPR and GLBA are optional.
• Bachelor's degree in Cybersecurity, Computer Science, Data Science, or a related field.
• Experience conducting tabletop exercises and disaster recovery exercises is ideal.
• Excellent analytical and problem-solving abilities.
• Effective communication and interpersonal skills; able to work independently and with a multidisciplinary team.
• Professional certifications are a plus (CISSP, CISM, CISA, CRISC or CGRC).
• Must meet deadlines and deliver status updates to project team regularly.

Aufgaben

• Lead firmwide Information Security GRC initiatives in partnership with the Information Security team.
• Coordinate ISO 27001 annual re-certifications and client audits.
• Track information security risks and report to Information Security leadership.
• Oversee third‑party and vendor risk as part of risk management strategy.
• Develop and enforce a cohesive GRC program with policies and standards.
• Collaborate with IT, legal, finance and operations to ensure controls are in place.

Kenntnisse

GRC experience

GRC governance

Risk assessment

ISO 27001

Communication

Cross-functional

Ausbildung

Bachelor's degree in Cybersecurity

Bachelor's degree in CS/IT

Jobbeschreibung

O’Melveny & Myers LLP is seeking an Information Security GRC Lead in a role that can be remote or based in any U.S. office, with the San Francisco posting serving as the application location.

You will lead the firm’s GRC program, coordinate ISO 27001 activities and audits, and manage third‑party risk while reporting to the Information Security Officer. The position requires deep knowledge of GRC, risk management frameworks and regulatory compliance, plus strong collaboration with IT, legal