IG Compliance & Security Analyst

Cooley is seeking an IG Compliance & Security Analyst to join the Information Governance & Data Privacy team, responsible for conducting audits, developing compliance initiatives, and maintaining the firm's ISO 27001 certification.

Requirements

• Conduct both internal and external audits to ensure compliance with all industry-mandated regulations
• Work on compliance initiatives to ensure operational effectiveness with applicable laws and regulations, as well as internal policies and procedures
• Monitor activities of assigned IS areas to ensure compliance with internal policies and standards
• Provide guidance to business functions on compliance/security-related matters
• Coordinate audit-related tasks to ensure the readiness of managers and their teams for audit testing and facilitate the timely resolution of any audit findings
• Conduct/support periodic risk assessments and develop appropriate mitigation plans in support of deliverables
• Maintain the firm’s ISO 27001 certification
• Maintain the firm’s governance, risk and compliance tools
• Answer client assessment and audits to ensure firm compliance
• Perform assessments and audits of vendors to ensure compliance with firm security policies and procedures
• Develop and maintain metrics that assess the firm’s governance, risk and compliance initiatives
• Assess and track the firm’s compliance to existing and future global regulations in privacy and security
• Assess and track the firm’s compliance with standard security frameworks such as ISO and NIST
• Assist in the identification of risks, threats and vulnerabilities to firm
• Track risks and mitigation efforts
• Participate in governance, risk and compliance forums and organizations to learn new ideas to solve problems
• Evaluate effectiveness of the internal security control framework and recommend adjustments as business needs change
• Regularly interact with all levels of management to present and discuss audit results and obtain gap remediation status
• Perform periodic security risk assessments and advise business stakeholders on best practices to reduce risk and overall breach profile
• All other duties as assigned or required

Benefits

• Medical
• Health Savings Account (with applicable medical plan)
• Dental
• Vision
• Health and/or Dependent Care Flexible Spending Accounts
• Pre-tax Commuter Benefits
• Life Insurance
• AD&D
• Long-term Care Coverage
• Backup Care for Children and/or Adults
• Parental Support Benefits
• Paid Time Off (PTO)
• Paid Holidays
• Generous Parental Leave
• Fertility Benefits