IG Compliance & Security Analyst

IG Compliance & Security AnalystCooley is seeking an IG Compliance & Security Analyst to join the Information Governance & Data Privacy team.Position summary: Cooley Information Services (IS) embraces a culture of customer service excellence and all members of the department are expected to move this agenda forward. To that end, the IG Compliance & Security Analyst is expected to recognize that the Cooley IS Department is a service organization first and foremost and will be evaluated on this requirement equal in importance to the technical or operational responsibilities outlined later in this document.Position responsibilities:Conduct both internal and external audits to ensure compliance with all industry-mandated regulationsWork on compliance initiatives to ensure operational effectiveness with applicable laws and regulations, as well as internal policies and proceduresMonitor activities of assigned IS areas to ensure compliance with internal policies and standardsParticipate in the development and implementation of new business initiatives to ensure functionality required to support complianceProvide guidance to business functions on compliance/security-related mattersCoordinate audit-related tasks to ensure the readiness of managers and their teams for audit testing and facilitate the timely resolution of any audit findingsConduct/support periodic risk assessments and develop appropriate mitigation plans in support of deliverablesConduct formal risk assessment reviews to determine the critical points of business exposureEvaluate and recommend commercial governance, risk and compliance vendors and toolsMaintain the firm's ISO 27001 certificationMaintain the firm's governance, risk and compliance toolsAnswer client assessment and audits to ensure firm compliancePerform assessments and audits of vendors to ensure compliance with firm security policies and proceduresDevelop and maintain metrics that assess the firm's governance, risk and compliance initiativesAssess and track the firm's compliance to existing and future global regulations in privacy and securityAssess and track the firm's compliance with standard security frameworks such as ISO and NISTAssist in the identification of risks, threats and vulnerabilities to firmTrack risks and mitigation effortsParticipate in governance, risk and compliance forums and organizations to learn new ideas to solve problemsEvaluate effectiveness of the internal security control framework and recommend adjustments as business needs changeRegularly interact with all levels of management to present and discuss audit results and obtain gap remediation statusPerform periodic security risk assessments and advise business stakeholders on best practices to reduce risk and overall breach profileAll other duties as assigned or requiredSkills and experience:Required:Ability to work extended and/or weekend hours, as requiredAbility to travel, as required3+ years' experience in governance, risk and compliance (GRC) processes, solutions, information security and auditing; Eligible for consideration of Senior designation with 5+ years' directly applicable work experienceCISSP or equivalent certifications and/or experienceDemonstrated ability to apply IS-related knowledge and experience in solving compliance issuesBackground in security controls, auditing, network and system securityProven practical experience in information security and well-rounded knowledge of ISTExperience with managing and implementing ISO 27001 or NIST complianceDemonstrated experience evaluating the security posture of vendors and system architecturePrior experience implementing and running incident management programs and systemsPrior experience handling vendor relationshipsProject management experiencePreferred:Bachelor's degree in Information Technology or Computer Information SystemsPrior law firm experienceDesired certifications: PCIP, ISA/QSA, CISSP, CISA, CISM, and related GIACExperience acting in an independent audit functionExperience implementing GDPR, HIPAA, SOC 2 auditsAdditional security certificationsCompetencies:Exceptional customer service skillsAbility to express technical concepts in business termsAble to work well under deadlines in a changing environment and complete multiple projects effectively and concurrentlyExcellent analytical, problem-solving and project management skillsAbility to balance security best practices with business objectivesProven track record of excellent decision-making, integrity and working with IS management, business users and staffExcellent oral and written communication skills, including technical and user documentationDetail orientated and strong organizational skillsAbility to work independently and under high pressure with tight schedules and deadlinesAbility to interact well with all levels of staffExcellent active listening skillsAmbitious and motivated team playerCapable of grasping new concepts quickly and without prior experienceAbility to interact and coordinate with several teams to achieve objectivesAbility to solve problems independently and simultaneously, effectively managing multiple tasksProfessional demeanor at all timesCooley offers a competitive compensation and excellent benefits package and is committed to fair and equitable employment practices.EOE.The expected annual pay range for this position with a full-time schedule is $88,000 - $124,000. Please note that final offer amount will be dependent on geographic location, applicable experience and skillset of the candidate. Senior level candidates may be considered for this position and would be eligible for a higher salary range based on experience.We offer a full range of elective benefits including medical, health savings account (with applicable medical plan), dental, vision, health and/or dependent care flexible spending accounts, pre-tax commuter benefits, life insurance, AD&D, long-term care coverage, backup care for children and/or adults and other parental support benefits. In addition to elective benefit options, benefited employees receive firm-paid life insurance, AD&D, LTD, short term medical benefits as well as 21 days of Paid Time Off ("PTO") and 10 paid holidays each year. We provide generous parental leave and fertility benefits. New employees will attend a detailed benefit orientation to learn more about our many benefits and resources.