Governance Risk and Compliance Analyst

This is a fully remote position, open to applicants in Alabama, +16 more states.

📋 Description

• Engage in activities related to Polsinelli’s information and data governance initiatives.

• Review Outside Counsel Guidelines to ensure the Firm meets or exceeds client security expectations and complete necessary documentation.

• Timely completion of client security questionnaires.

• Support the implementation of a multi-year strategy to enhance data governance capabilities.

• Analyze and provide guidance on information governance issues pertaining to legal and regulatory compliance.

• Monitor adherence to data governance policies and standards while assessing potential risks associated with data handling.

• Collaborate with multiple teams to drive security and compliance initiatives.

• Counsel business units and technology leaders on information security risks while proposing risk treatment options and alternatives.

• Gather performance indicators, metrics, and evidence for information security and data governance initiatives.

• Deliver relevant, concise, and actionable recommendations to leadership.

• Stay updated on best practices in information and data governance, data security governance concepts, regulations, and industry trends.

• Assist in the formulation of Data Governance, Information Security, and Privacy Policies and their practical application.

• Oversee multiple concurrent workstreams, communicating issues, concerns, risks, and status updates to stakeholders.

• Ensure reliable and consistent attendance and availability during scheduled work hours, including via Zoom, email, voicemail, and phone.

⛳️ Requirements

• Bachelor's degree in Management Information Systems (MIS), Computer Science, or a related field, or equivalent work experience.

• Strong understanding of risk and controls, with practical knowledge of standards and frameworks such as COSO, COBIT, ISO, NIST, and ITIL.

• Ability to excel in a dynamic environment while managing multiple tasks and responsibilities simultaneously.

• Practical experience with information security risk assessments and audits.

• Installation of Zoom on a mobile device is a requirement for the Information Security team.

• Information Governance Professional (IGP) and/or Certified Information Professional (CIP) certifications are preferred.

• Third Party Risk Management Practitioner (TPRMP) certification is preferred.

• Experience in the legal sector is a plus.

• Strong comprehension of information security regulatory requirements and best practices is advantageous.

🏝️ Benefits

• Paid time off.

• Sick time off.

• Referral program.

• Medical insurance and benefits.

• Dental insurance.

• Vision insurance.

• Life insurance.

• AD&D insurance.

• ID Theft insurance.

• Long-term disability benefits.

• Short-term disability benefits.

• Parking/Transit reimbursement (varies depending on location).

• 401(k) benefits.

• Employee assistance benefits.

• Flexible work arrangements.

• Remote work option.