IT Enterprise Risk Senior Analyst
Core
Senior IT Risk Analyst managing GRC and IT risk by identifying security risks across systems, cloud, and third parties to protect confidential information in a law firm.
Role type
Senior IC IT Enterprise Risk Analyst
Builds
Risk registers, policy frameworks, audit evidence packages, and client security attestations
Domain
Legal industry / Information Security / GRC
Deliverable
dashboards & analysis
Required skills
Risk assessment, policy lifecycle management, third-party risk management, audit coordination, regulatory compliance mapping, incident response support, vendor due diligence, control testing, risk reporting, gap analysis
Preferred skills
Quantitative risk methods (FAIR), CMMC Level 2 readiness, ITAR/EAR data handling, NIS2 alignment
Technologies
ISO/IEC 27001, NIST CSF, SP 800-171, CIS Controls, SOC 2, HIPAA, GLBA, GDPR, CCPA/CPRA
Responsibilities
Lead development and maintenance of information security policies and standards; conduct complex risk assessments for applications and cloud services; manage third-party security due diligence and vendor reassessments; coordinate internal and external audits and client security reviews; support cyber insurance applications and renewals; provide risk reporting to leadership and audit committees.
Seniority
Senior, hands-on IC