RemoteLeaf Logo
Log in Sign up

Senior GRC Analyst

3 weeks, 2 days ago
United States
Full-time
Senior
Security Analyst
Cybersecurity
Apply Now
Morgan & Morgan

Morgan & Morgan

Morgan & Morgan is America's largest personal injury law firm, providing legal representation for individuals and families injured by negligence. With over $15 billion recovered for clients, they are dedicated to fighting for the people.

Specialized Consumer Services
1K-5K
Founded 1988
View All Jobs 24

Description

  • Build and own the end-to-end third-party risk management process, including vendor tiering, assessment criteria, and escalation thresholds.
  • Lead risk assessments for high-exposure vendor relationships such as case management, e-discovery, and payment processing.
  • Develop risk acceptance and remediation recommendations and present analysis to the Director of Business Continuity.
  • Run the full policy lifecycle, including drafting, review cadence, approval workflows, and firm-wide attestation tracking.
  • Write policy content and close policy gaps against ISO 27001, NIST CSF, and CIS v8.1.
  • Own the enterprise risk register, including methodology, scoring calibration, and quarterly review cadence.
  • Lead control testing and gap assessments in Vanta and design remediation plans.
  • Help design the security awareness program, including the content calendar, phishing simulations, targeted training, and Program Champions.
  • Serve as a point of contact for cyber insurance audits, major client security due diligence, and regulatory inquiries.
  • Build and maintain GRC reporting for leadership and coordinate with BC/DR, Crisis Management, and Privacy teams on related risks.

Requirements

  • 4–6+ years of experience in GRC, IT audit, compliance, or information security.
  • Deep hands-on experience with a GRC platform; Vanta is strongly preferred.
  • Strong working knowledge of ISO 27001, NIST CSF, and CIS v8.1, with experience mapping controls across multiple frameworks.
  • ISC2 CC/CCSP or ISACA CRISC/CISA required, or another ISC2/ISACA-related certification such as CISSP or CISM.
  • Direct experience leading external audits or client security due diligence as the primary point of contact, including findings negotiation.
  • Experience designing a security awareness program.
  • Ability to operate independently.
  • Bachelor’s degree in Information Security, Risk Management, Computer Science, or a related field, or equivalent experience.

Benefits

  • Medical and dental insurance for full-time employees.
  • 401(k) plan.
  • Paid time off.
  • Paid holidays.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Raiffeisen Bank Ukraine

RASP Cyber Force | Професійна програма для ветеранів у сфері кібербезпеки

Raiffeisen Bank Ukraine 10K-50K Banks

Raiffeisen Bank’s RASP Cyber Force is a six-month cybersecurity development program for veterans and service members, combining training and part-time work in one of the bank’s information security teams.

Ukraine Part-time Entry Level Security Analyst Security Engineer
Cybersecurity Encryption Network Security Penetration Testing SOC
20 hours, 3 minutes ago
AvePoint

Governance, Risk and Compliance Specialist

AvePoint 1K-5K Internet Software & Services

AvePoint is hiring an IT security operations professional to support system security, access control, compliance, and lifecycle management across enterprise environments.

Singapore Full-time Senior Security Analyst
20 hours, 18 minutes ago
Lever

Digital Forensics SME

Lever 251-1K Professional Services

AnaVation is hiring a Senior Digital Forensics professional to support federal law-enforcement investigations, cybercrime cases, and operational missions through advanced forensic analysis and capability development.

United States Full-time Senior Security Analyst
Cybersecurity PowerShell Python
20 hours, 18 minutes ago
Binance

Web3 Security Senior Operations Specialist

Binance 5K-10K Capital Markets

Binance is hiring a Web3 security and fraud operations specialist to analyze complex cases, strengthen defenses, and improve detection and knowledge-sharing across the team.

Asia Hong Kong Taiwan Full-time Senior Security Analyst
Blockchain
20 hours, 33 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers