Security GRC Specialist II - Risk & Compliance Leader

Kirkland & Ellis; Chicago (IL); On-site; USD 116,000 - 144,000; Full time

Job summary

Kirkland & Ellis in Chicago is seeking a Security GRC Specialist II to strengthen security programs, manage risk, and guide compliance efforts across client and vendor interactions. You will partner with technical teams, business stakeholders, clients, and vendors to ensure effective controls and clear risk communication.

This role blends strategic oversight with hands-on execution—from policy development to vendor risk and security awareness initiatives—within a dynamic legal environment.

Qualifications

• Bachelor's degree with five years of IT security experience.
• Certifications such as CISSP, CISA, CISM or advanced AI security certifications preferred.
• 4+ years of hands-on information security experience.
• Strong knowledge of ISO 27001, NIST, SOC and SIG frameworks.
• AI risk governance, security and risk management experience required.
• Technical writing and clear documentation skills.
• Experience leading risk assessments and vendor security reviews.
• Familiarity with GRC platforms and access controls.
• Analytical, organized, able to work independently or in teams.
• Working knowledge of auth, encryption, firewalls, SIEM, vulnerability mgmt.

Responsibilities

• Lead client and third-party security assessments and audits.
• Create, maintain and evolve security policies and standards.
• Manage IT security risk and compliance programs across the org.
• Advise stakeholders as a Security SME across technical and non-technical audiences.
• Oversee third-party Security Vendor Risk Management program.
• Manage security exception requests and risk treatment guidance.
• Oversee Security Awareness program roadmap and training effectiveness.
• Support GRC platforms and related workflows.
• Evaluate IT programs for alignment with published standards.

Skills

Client & Third-Party Assessments

Policy & Standards Management

Risk & Compliance Assurance

Security Consulting & SME Support

Vendor Risk Management

Exception & Risk Treatment

Security Awareness Program

GRC Platform Administration

Controls & Compliance Evaluations

Education

Bachelor's degree or equivalent in IT Security

Certifications: CISSP, CISA, CISM, AAIA/AAIR/AAISM or equivalents

Tools

GRC platforms

Job description

Kirkland & Ellis in Chicago is seeking a Security GRC Specialist II to strengthen security programs, manage risk, and guide compliance efforts across client and vendor interactions. You will partner with technical teams, business stakeholders, clients, and vendors to ensure effective controls and clear risk communication.

This role blends strategic oversight with hands-on execution—from policy development to vendor risk and security awareness initiatives—within a dynamic legal environment.