GRC Analyst in Information Security

Join Bennett Jones as an Information Security GRC Analyst, supporting robust governance, risk management, and compliance frameworks. This role emphasizes third-party security and a structured risk-based approach.

As a GRC Analyst at Bennett Jones, you will report directly to the Director of Information Security GRC. You will contribute to maintaining compliance with industry standards such as ISO 27001 and ISO 22301, ensuring the firm’s internal security tasks and vendor compliance are effectively managed. Your excellent communication skills will support timely responses to security audits and requests.

Key Responsibilities:

• Oversee cybersecurity compliance for key third-party vendors

• Manage responses to security questionnaires and client inquiries

• Maintain security dashboards, metrics, and reports

• Perform internal security audits and address compliance gaps

• Stay current with emerging security threats and regulations

Requirements:

• Bachelor's degree in IT, cybersecurity, or similar

• Minimum three years in IT compliance or risk management

• Knowledge of ISO and NIST frameworks

• Excellent communication and interpersonal skills

• High attention to detail and initiative

Contribute to enhancing Bennett Jones's information security posture with your expertise in GRC.
#J-18808-Ljbffr