IT Risk and Compliance Analyst

Location: Town of Florida

## IT Risk and Compliance Analyst Apply remote type:
Hybrid locations:
Miramartime type:
Full time posted on:
Posted Yesterday job requisition :
JRGreenberg Traurig (GT), a global law firm with locations across the world in 15 countries, has an exciting employment opportunity for you. We offer competitive compensation and an excellent benefits package, along with the opportunity to work within an innovative and collaborative environment.
** Join our Technology Team as an IT Risk and Compliance Analyst located in our Miramar office.
** We are seeking a professional who thrives in a fast-paced, deadline-driven environment. The ideal candidate possesses strong problem-solving and decision-making abilities, ensuring efficiency and accuracy in every task. With a dedicated work ethic and a can-do attitude, you will take initiative and approach challenges with confidence and resilience. Excellent communication skills are essential for collaborating effectively across teams and delivering exceptional client service.

If you are someone who demonstrates initiative, adaptability, and innovation, we invite you to join our team. This role will be based in our Miramar office on a hybrid basis. This role reports to the Technology Security Manager.
** Position Summary
** The IT Risk and Compliance Analyst will take a lead in the ongoing design, development, and management of the firm’s third-party risk management program.  The position will consist of developing, monitoring, and assessing risks regarding vendor and partner relationships.
** Key Responsibilities
*** Completes vendor risk assessments submitted by clients and prospective clients (RFP)
* Responds to client Requests for Proposals (RFPs) and questionnaires related to security
* Performs information security due diligence on third party vendors to determine the effectiveness of their controls to protect the firm’s data, identify any discrepancies and provide recommendations to management
* Assesses client needs against security concerns and resolves various risk issues
* Develops, implements, assigns, and monitors third party vendor assessments
* Executes and documents assessment activities following established processes and procedures
* Performs third party reviews to assess vendor information security posture and practices
* Keeps abreast of regulatory and compliance related information to enhance the third-party due diligence program
* Collaborates with team members to provide subject matter expertise with respect to the Firm’s third-party risk management program and to create and update documents and presentations that can be used to inform internal employees, external auditors, or internal auditors about the Firm’s third-party risk management program
* Contributes to the continuous improvement, including automation where possible, of all aspects of the third-party risk management program based on expert knowledge, industry best practices, business objectives, and risk tolerance, keeping the program relevant and in alignment with the business objectives
* Leads third party risk threat notification to third party vendors by assessing vendor risk, impact, and response to third (e.g., assessing Log4

Shell vendor impact and response communications)
* Tracks vendor mitigation progress of identified threats and risks
* Develops, implements, monitors KPI, KRI for third party risk management program
* Develops and updates third party risk management program policies, procedures, and best practices
* Actively participates in outside Third-Party Risk Management communities
* Works with the security team to develop, manage, and maintain the Firm’s Information Security Program, security awareness programs, insider threat programs, etc.
* Identifies Information Security &…