Security & Compliance Analyst (ISO 27001)

Hogan Lovells Cadwalader; Washington (District of Columbia); On-site; USD 80,000 - 89,000; Full time

Job summary

Hogan Lovells Cadwalader in Washington, DC, is seeking a Security Compliance Analyst to support the Information Security function, helping meet regulatory and client cybersecurity requirements. You will work with the Security Compliance Manager to audit programs, maintain ISO 27001 ISMS, and coordinate client security inquiries and assessments.

The ideal candidate has strong security/compliance knowledge, attention to detail, and excellent communication with technical and non-technical

Qualifications

• Two (2)+ years of experience in IT security audits, security assessments, compliance, or related area.
• Bachelor's degree preferred.
• ISO 27001 Lead Auditor certification and/or substantial experience with ISO 27001 and related standards preferred.
• Working knowledge of ISO 27001 controls.
• Working knowledge of Cyber Essentials Plus requirements and controls preferred.

Responsibilities

• Respond to client security questionnaires and RFPs, communicating the firm’s information security capabilities and controls.
• Coordinate and support security assessments required by clients and certification bodies.
• Support maintenance of the ISO 27001 ISMS and related documentation and deliverables.
• Assist with ISO 27001 audits and other internal and external security and compliance assessments.
• Serve as a liaison with clients on IT security and compliance inquiries.
• Coordinate and maintain internal and external security assessment schedules.
• Manage security and compliance deliverables across multiple teams and stakeholders.
• Collaborate with internal and external stakeholders to address control gaps and remediation activities.
• Communicate the firm’s security and compliance program to clients and third parties.
• Identify opportunities to strengthen controls and improve security and compliance processes.

Skills

Information security

NIST CSF

ISO 27001

Documentation review

Stakeholder communication

Cross-team collaboration

Organization

Education

Bachelor's degree

ISO 27001 Lead Auditor certification

ISO 27001 knowledge

Cybersecurity education

Tools

NIST Cybersecurity Framework

NIST SP 800-171

ISO 27001 ISMS

Job description

Hogan Lovells Cadwalader in Washington, DC, is seeking a Security Compliance Analyst to support the Information Security function, helping meet regulatory and client cybersecurity requirements. You will work with the Security Compliance Manager to audit programs, maintain ISO 27001 ISMS, and coordinate client security inquiries and assessments.

The ideal candidate has strong security/compliance knowledge, attention to detail, and excellent communication with technical and non-technical