Remote InfoSec GRC Lead: Governance & Compliance

O'Melveny & Myers LLP; Dallas (TX); Remote; USD 120,000 - 160,000; Full time

Job summary

O’Melveny & Myers LLP seeks an Information Security Governance, Risk and Compliance Lead to drive firmwide GRC initiatives. This role partners with the Information Security Officer to mature risk management, policies, and controls across the organization.

The position can be remote or based in any U.S. office, with the Dallas site specified. You will assess risks, coordinate audits, and report on compliance status to leadership, while aligning with ISO 27001, NIST, HIPAA, and GDPR standards.

Qualifications

• Five years of experience in GRC or as a cybersecurity practitioner, including security analysis, compliance and risk management.
• Experience in distributed and hybrid office teams.
• Understanding of information security and privacy frameworks: ISO/IEC 27001 required, NIST, HIPAA, HITRUST, GDPR; GLBA optional.
• Bachelor's degree in Cybersecurity, Computer Science, Data Science, or related field.
• Experience conducting tabletop exercises and disaster recovery tests; strong analytical abilities.
• Excellent written and verbal communication; ability to interact with all levels of staff.

Responsibilities

• Lead firmwide Information Security GRC initiatives with the Information Security team.
• Coordinate with ISO 27001 annual re-certifications and client audits.
• Track and respond to external reviews and guidelines; ensure timely actions.
• Oversee GRC activities and liaison with Information Security Officer.
• Serve as a SMEs and trusted advisor on GRC matters for leadership.
• Coordinate with IT, legal, finance and operations to develop a cohesive GRC program.
• Manage third‑party risk management and vendor risk assessments.
• Develop and enforce cybersecurity policies, standards, and controls.
• Provide GRC reports highlighting compliance status, risk exposure and mitigations.

Skills

GRC experience

Cybersecurity

Risk management

Leadership

Communication skills

Education

Bachelor's degree in Cybersecurity, Computer Science, Data Science, or related field

Tools

ISO/IEC 27001

NIST

HIPAA

GDPR

Job description

O’Melveny & Myers LLP seeks an Information Security Governance, Risk and Compliance Lead to drive firmwide GRC initiatives. This role partners with the Information Security Officer to mature risk management, policies, and controls across the organization.

The position can be remote or based in any U.S. office, with the Dallas site specified. You will assess risks, coordinate audits, and report on compliance status to leadership, while aligning with ISO 27001, NIST, HIPAA, and GDPR standards.