Description
Holland & Knight is seeking an IT Enterprise Risk Analyst to join their team. This role involves managing the Firm’s GRC and IT risk programs, specifically focusing on information security for client data, attorney work, and privileged communications. The analyst will report to the IT Enterprise Risk Management Manager and will be responsible for maintaining policies, assessing risks and controls, coordinating third-party reviews, drafting responses for client guidelines, preparing evidence for cyber insurance, and supporting audits. The position requires alignment with various international and regulatory frameworks like ISO/IEC 27001/27002, NIST CSF, CIS Controls, SOC 2, HIPAA, GLBA, GDPR, and state privacy laws.
