Senior GRC & Privacy Risk Analyst

BAL; Richardson (TX); On-site; USD 90,000 - 135,000; Full time

Benefits offered by this job

Medical, dental, vision

Disability and life insurance

Unlimited vacation

401(k) with company match

Job summary

BERRY Appleman & Leiden (BAL) is seeking a GRC/Information Security professional to lead internal audits and manage ISO 27001/27701 programs from its Richardson, TX location. You’ll drive risk-based audits, support privacy operations, and help shape AI governance and vendor due diligence.

The role emphasizes developing KPIs/KRIs, coordinating with SecOps, and guiding incident response in a fast-paced environment, with competitive compensation and comprehensive benefits.

Qualifications

• Minimum 3–5 years’ experience in information security, GRC, compliance, or a related field.
• 2+ years’ direct experience in internal audit, GRC, or a compliance/risk role.
• Familiarity with ISO 27001 and ISO 27701.
• Experience with AI governance frameworks or regulatory standards is a plus.
• CISA/CRISC/CGRC or similar certification is a plus.

Responsibilities

• Lead internal audits with risk-based methodology across IT, InfoSec, Privacy, and AI controls.
• Maintain BAL’s ISMS and PIMS to comply with ISO 27001/27701.
• Support privacy program operations including DPIAs and DSAR.
• Support AI governance framework and vendor due diligence criteria.
• Perform risk-tiered vendor assessments and maintain vendor risk register.
• Operate BAL’s DLP tools and coordinate with SecOps for incident remediation.
• Support Security Operations and Privacy incident response.
• Own BAL’s BC/DR program including testing and reporting.
• Develop and manage GRC metrics and data governance initiatives.

Skills

Risk management

Information security

Privacy/compliance

Audit planning

Third-Party Risk Management

DLP tooling

KPIs & KRIs

Communication

Education

Bachelor’s degree in related field

Job description

BERRY Appleman & Leiden (BAL) is seeking a GRC/Information Security professional to lead internal audits and manage ISO 27001/27701 programs from its Richardson, TX location. You’ll drive risk-based audits, support privacy operations, and help shape AI governance and vendor due diligence.

The role emphasizes developing KPIs/KRIs, coordinating with SecOps, and guiding incident response in a fast-paced environment, with competitive compensation and comprehensive benefits.