Security Compliance Analyst

Hogan Lovells Cadwalader US LLP; Washington (District of Columbia); Vor Ort; USD 80.000 - 89.000; Vollzeit

Benefits dieser Stelle

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

Paid time off

Zusammenfassung

Hogan Lovells Cadwalader US LLP seeks a Security Compliance Analyst to support the Information Security function in meeting regulatory, client, and industry cybersecurity requirements. You will work with the Security Compliance Manager and colleagues to assist audits, maintain the ISO 27001 ISMS, and coordinate client security inquiries.

The role requires strong understanding of security frameworks, excellent communication, and ability to liaise with technical and non-technical stakeholders

Qualifikationen

• 2+ years in IT security audits, security assessments, compliance, or related area.
• ISO 27001 Lead Auditor certification and/or substantive experience with ISO 27001 and related standards preferred.
• Working knowledge of ISO 27001 controls and Cyber Essentials Plus requirements and controls preferred.

Aufgaben

• Respond to client security questionnaires and RFPs, clearly communicating the firm’s information security capabilities and controls.
• Coordinate and support security assessments required by clients and certification bodies.
• Support the ongoing maintenance of the firm’s ISO 27001 ISMS and related documentation and deliverables.
• Assist with ISO 27001 audits and other internal and external security and compliance assessments.
• Serve as a liaison with clients on IT security and compliance inquiries.
• Coordinate and maintain internal and external security assessment schedules.
• Manage security and compliance deliverables across multiple teams and stakeholders.
• Collaborate with internal and external stakeholders to identify and address control gaps and remediation activities.
• Communicate the firm’s security and compliance program clearly and effectively to clients and other third parties.
• Identify opportunities to strengthen controls and improve security and compliance processes.

Kenntnisse

Information security

ISO 27001

NIST CSF

NIST SP 800-171

Attention to detail

Communication

Stakeholder management

Cross-team collaboration

Organization

Ausbildung

Undergraduate degree

ISO 27001 Lead Auditor

Jobbeschreibung

The Security Compliance Analyst will support Hogan Lovells Cadwalader’s Information Security function in helping the firm meet regulatory, client, and industry cybersecurity requirements. Working closely with the Security Compliance Manager and colleagues across the firm, this role will support internal and external security and compliance audits, contribute to the ongoing maintenance of the firm’s ISO 27001 Information Security Management System (ISMS), and coordinate security assessments and client security inquiries. The ideal candidate will bring a strong understanding of security and compliance requirements, excellent attention to detail, and the ability to communicate effectively with both technical and non-technical stakeholders.

RESPONSIBILITIES

• Respond to client security questionnaires and RFPs, clearly communicating the firm’s information security capabilities and controls.
• Coordinate and support security assessments required by clients and certification bodies.
• Support the ongoing maintenance of the firm’s ISO 27001 ISMS and related documentation and deliverables.
• Assist with ISO 27001 audits and other internal and external security and compliance assessments.
• Serve as a liaison with clients on IT security and compliance inquiries.
• Coordinate and maintain internal and external security assessment schedules.
• Manage security and compliance deliverables across multiple teams and stakeholders.
• Collaborate with internal and external stakeholders to identify and address control gaps and remediation activities.
• Communicate the firm’s security and compliance program clearly and effectively to clients and other third parties.
• Identify opportunities to strengthen controls and improve security and compliance processes.

SKILLS

• Understanding of information security best practices and solutions.
• Familiarity with security frameworks and standards, including ISO 27001, NIST Cybersecurity Framework, and NIST SP 800-171.
• Strong attention to detail and the ability to review and analyze documentation accurately.
• Excellent written and verbal communication skills, with the ability to communicate effectively across different audiences and levels of the organization.
• Ability to build strong working relationships with internal and external stakeholders.
• Collaborative approach with the ability to work effectively across teams and functions.
• Strong organizational skills and the ability to manage multiple priorities and deliverables.

EDUCATION & EXPERIENCE

• Two (2)+ years of experience in IT security audits, security assessments, compliance, or a related area required.
• Undergraduate degree preferred.
• ISO 27001 Lead Auditor certification and/or substantive experience working with ISO 27001 and related standards preferred.
• Working knowledge of ISO 27001 controls.
• Working knowledge of Cyber Essentials Plus requirements and controls preferred.

WORK SCHEDULE

Core hours are Monday through Friday, 9:00 a.m. to 6:00 p.m., including one hour for lunch.

The role requires flexibility to work the hours necessary to effectively perform job responsibilities and meet business, client, and team needs.

ADDITIONAL INFORMATION

• In Washington, D.C., the expected base salary range for this role is $80,160 - $89,090 per year.
• This range reflects a good-faith estimate of pay at the time of posting; the actual compensation offered may vary depending on factors such as the candidate’s qualifications.
• This position is eligible for additional forms of compensation, which may include annual discretionary bonuses.
• Employees in this role are also eligible for benefits offered by the firm, subject to applicable plan terms and conditions, which currently include medical, dental, and vision insurance; a 401(k) retirement plan; and paid time off.
• Please review this link for more information regarding employee benefits in the United States.
• This job description sets forth the responsibilities of this position and may be changed from time to time as shall be determined.

Hogan Lovells Cadwalader is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, age, national origin, disability, sexual orientation, gender identity or expression, marital status, genetic information, protected Veteran status, or other factors protected by law.

Hogan Lovells Cadwalader complies with federal and state disability laws and makes reasonable accommodations for applicants and candidates with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, please contact our Benefits Department at [e-mail].

Hogan Lovells Cadwalader brings together more than 3,100 lawyers across 36+ worldwide offices, combining global reach with deep sector expertise. Strategically placed at the intersection of business, finance, and government. Working seamlessly across practice areas and borders. Our combination marks a new chapter. Prepare to join teams of people that want you to succeed, where ideas move quickly, support is shared freely, and colleagues help each other grow, creating an inclusive culture where everyone can belong. You’ll be challenged to perform at the highest level in an environment shaped by precision, judgement, and exceptional standards. It’s a culture that expects excellence and gives you the opportunity to develop in every moment. Hogan Lovells Cadwalader is a global law firm with offices in many jurisdictions and countries. Some of the information displayed may not be applicable to the region in which you are applying, your individual situation or the local legal framework. The system uses standard terminology that applies irrespective of whether you are/will be an employee, partner or self-employed.