Security Compliance Analyst — ISO 27001 & Audits

Hogan Lovells; Washington (District of Columbia); Hybrid; USD 80,000 - 89,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan

Paid time off

Job summary

Hogan Lovells Cadwalader is seeking a Security Compliance Analyst in Washington DC to support information security audits, ISO 27001 ISMS maintenance, and client security inquiries. You will work with the Security Compliance Manager and cross‑functional teams to ensure compliance with regulatory, client, and industry standards.

The ideal candidate has 2+ years in IT security audits, familiarity with ISO 27001 and NIST frameworks, and strong communication skills to interact with technical and

Qualifications

• Two (2)+ years of experience in IT security audits, security assessments, compliance, or a related area required.
• ISO 27001 Lead Auditor certification and/or substantive experience working with ISO 27001 and related standards preferred.
• Working knowledge of ISO 27001 controls.
• Working knowledge of Cyber Essentials Plus requirements and controls preferred.

Responsibilities

• Respond to client security questionnaires and RFPs, clearly communicating the firm’s information security capabilities and controls.
• Coordinate and support security assessments required by clients and certification bodies.
• Support the ongoing maintenance of the firm’s ISO 27001 ISMS and related documentation and deliverables.
• Assist with ISO 27001 audits and other internal and external security and compliance assessments.
• Serve as a liaison with clients on IT security and compliance inquiries.
• Coordinate and maintain internal and external security assessment schedules.
• Manage security and compliance deliverables across multiple teams and stakeholders.
• Collaborate with internal and external stakeholders to identify and address control gaps and remediation activities.
• Communicate the firm’s security and compliance program clearly and effectively to clients and other third parties.
• Identify opportunities to strengthen controls and improve security and compliance processes.

Skills

Information security

ISO 27001

NIST CSF

NIST SP 800-171

Communication

Attention to detail

Cross-functional

Education

Undergraduate degree

ISO 27001 Lead Auditor

Tools

Audit tooling

Job description

Hogan Lovells Cadwalader is seeking a Security Compliance Analyst in Washington DC to support information security audits, ISO 27001 ISMS maintenance, and client security inquiries. You will work with the Security Compliance Manager and cross‑functional teams to ensure compliance with regulatory, client, and industry standards.

The ideal candidate has 2+ years in IT security audits, familiarity with ISO 27001 and NIST frameworks, and strong communication skills to interact with technical and