Security Compliance Analyst

RESPONSIBILITIES - Respond to client security questionnaires and RFPs, clearly communicating the firms information security capabilities and controls. - Coordinate and support security assessments required by clients and certification bodies. - Support the ongoing maintenance of the firms ISO 27001 ISMS and related documentation and deliverables. - Assist with ISO 27001 audits and other internal and external security and compliance assessments. - Serve as a liaison with clients on IT security and compliance inquiries. - Coordinate and maintain internal and external security assessment schedules. - Manage security and compliance deliverables across multiple teams and stakeholders. - Collaborate with internal and external stakeholders to identify and address control gaps and remediation activities. - Communicate the firms security and compliance program clearly and effectively to clients and other third parties. - Identify opportunities to strengthen controls and improve security and compliance processes. SKILLS - Understanding of information security best practices and solutions. - Familiarity with security frameworks and standards, including ISO 27001, NIST Cybersecurity Framework, and NIST SP 800-171. - Strong attention to detail and the ability to review and analyze documentation accurately. - Excellent written and verbal communication skills, with the ability to communicate effectively across different audiences and levels of the organization. - Ability to build strong working relationships with internal and external stakeholders. - Collaborative approach with the ability to work effectively across teams and functions. - Strong organizational skills and the ability to manage multiple priorities and deliverables. EDUCATION and EXPERIENCE - Two (2)+ years of experience in IT security audits, security assessments, compliance, or a related area required. - Undergraduate degree preferred. - ISO 27001 Lead Auditor certification and/or substantive experience working with ISO 27001 and related standards preferred. - Working knowledge of ISO 27001 controls. - Working knowledge of Cyber Essentials Plus requirements and controls preferred. WORK SCHEDULE Core hours are Monday through Friday, 9:00 a.m. to 6:00 p.m., including one hour for lunch. The role requires flexibility to work the hours necessary to effectively perform job responsibilities and meet business, client, and team needs. Hogan Lovells Cadwalader is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, age, national origin, disability, sexual orientation, gender identity or expression, marital status, genetic information, protected Veteran status, or other factors protected by law.