Security Governance & Compliance Analyst

Mintz; Boston (MA); On-site; USD 85,000 - 100,000; Full time

Benefits offered by this job

Bonus eligible

Comprehensive benefits package

Job summary

Mintz in Boston is seeking an Information Security Analyst – GRC to support the firm's information security compliance program, including audit readiness, policy governance, risk tracking, and control reviews. The role also participates in the on‑call rotation and assists with first‑level security event triage.

The ideal candidate has 3–5 years in information security, compliance, audit, or governance, with strong organizational and documentation skills, and proficiency with Microsoft 365.

Qualifications

• Bachelor's degree or equivalent professional experience.
• 3-5 years of experience in information security, compliance, audit, project coordination, governance, operational risk, or related discipline.
• Strong organizational and documentation skills.
• Experience managing multiple priorities and deadlines.
• Strong written and verbal communication skills.
• Ability to function in a fast-paced, service-oriented environment.

Responsibilities

• Support the firm's information security compliance program.
• Coordinate audit preparation and maintain supporting evidence.
• Maintain policies, standards, procedures, and ISMS documentation.
• Perform recurring control reviews and compliance checks.
• Track risks, exceptions, findings, and remediation activities.
• Prepare security metrics, dashboards, and compliance reporting.
• Administer the firm's security awareness training and phishing simulation program, including campaign scheduling, reporting, and compliance tracking.
• Support ISO 27001 activities and future compliance initiatives.
• Participate in the Information Security on-call rotation.
• Review and triage low-complexity security alerts.
• Escalate suspicious activity according to documented procedures.
• Assist with incident documentation and follow-up activities.
• Coordinate security projects and recurring compliance activities.
• Track action items, deliverables, and remediation plans.
• Facilitate communication between technical and business teams.

Skills

Organizational skills

Documentation skills

Project coordination

Communication skills

Analytical abilities

Attention to detail

Team collaboration

Judgment and ethics

Customer service mindset

Education

Bachelor's degree or equivalent

Tools

Microsoft 365

Job description

Mintz in Boston is seeking an Information Security Analyst – GRC to support the firm's information security compliance program, including audit readiness, policy governance, risk tracking, and control reviews. The role also participates in the on‑call rotation and assists with first‑level security event triage.

The ideal candidate has 3–5 years in information security, compliance, audit, or governance, with strong organizational and documentation skills, and proficiency with Microsoft 365.