GRC Analyst

GRC Analyst | Legal Services | Up To $150k | 1 Day Onsite In Boston
Have you got experience in a professional services environment, wanting to expand further into a well-respected company?
Do you want to build a new GRC program in a brand-new role that you can make your own?
This organization is an award-winning law firm that is famous for its market-leading approach, working with some of the biggest Fortune 500 institutions in the world. They have also won awards for the best workplaces in Boston' for the past 3 years, partly down to their great internal culture and quality of life given to their employees.
The role -
You will be responsible for supporting the daily activities of the GRC function within the Boston office.
Liaise with business and external stakeholders to perform assessments and identify risk, whilst maintaining monitoring activities of existing vendors.
Maintain a database of knowledge.
Perform third-party security vendor diligence.
Requirements -
Experience in security governance, risk, and compliance or related.
Broad and solid understanding of cyber security concepts and risks.
Strong familiarity with industry frameworks such as ISO standards, NIST, and SOC reports.
Working knowledge of common audit and compliance tools.
Qualifications -
NIST & ISO frameworks.
Industry-recognized certification in security (e.g., CISSP, CISA, CISM, CRISC, ISO27001).
Customer service and communication skills.
Location -
Once a week onsite in Boston.
Salary -
Up to $150,000 + bonus.
Complete benefits package.
Feel free to apply and reach me via email at r.bray@ to discuss further.