Analyst, Information Security

About the company

Consilio stands as the global leader in eDiscovery document review flexible legal talent and legal advisory & transformation consulting services. With its Consilio Complete suite of capabilities the company empowers multinational law firms and corporations using innovative software cost-effective managed services and deep legal and regulatory industryexpertise.

Job Summary

• Work within the Information Security Privacy and Compliance domain supporting internal and external stakeholder requirements
• Respond to client security questionnaires RFI/RFPs and due diligence assessments by collaborating with cross-functional teams
• Support privacy programs and initiatives including data protection and regulatory alignment (e.g. GDPR HIPAA)
• Contribute to compliance and certification efforts such as ISO 27001 HITRUST SOC 2 Type II and other relevant frameworks
• Assist in internal and external audits including evidence gathering control validation and audit coordination
• Evaluate existing security controls and recommend practical improvements for enhanced control effectiveness
• Demonstrate strong written and verbal communication skills to clearly articulate security and privacy concepts to diverse audiences
• Work independently while effectively collaborating with global teams across business and support functions
• Exhibit structured thinking and the ability to translate technical controls into business-relevant responses

Client & Stakeholder Engagement

• Support end-to-end handling of client security enquiries including analysis drafting review and submission of responses
• Collaborate with internal stakeholders (security legal IT product and operations teams) to ensure accurate and consistent responses

Security & Compliance Support

• Assist in maintaining and supporting security compliance programs (ISO 27001 SOC 2 HIPAA GDPR etc.)
• Participate in audit readiness activities control testing and documentation management
• Track and manage client-driven compliance requirements and commitments

Privacy & Risk Management

• Contribute to privacy-related initiatives including data impact assessments records of processing activities and maintain privacy documentation for the team
• Support risk remediation in security and privacy controls

Operational Excellence

• Identify opportunities to improve response quality turnaround time and process efficiency
• Contribute to development of knowledge repositories standard responses and reusable artifacts
• Support automation and tooling initiatives to streamline repetitive tasks and reporting
• Continuous Improvement & Reporting
• Assist in tracking metrics related to client requests SLA adherence and quality of responses
• Contribute to ongoing process maturity and standardization efforts

• Bachelors degree with 3-4 years of direct experience in the field of information security
• Practical understanding of security standards processes and risk frameworks
• Experience in internal audits maintaining GRC platform
• Certified Information Systems Auditor (CISA) ISO 27001 LA credential highly recommended

Why Join Us:

• Be part of a collaborative and innovative work environment.

• Opportunity for professional growth and development.

• Competitive salary and benefits package.

• Contribute to shaping the future of our software development processes.

Consilios True North Values

• Client Experience Listen for the why.Clearly define success. Be accountable. Go the extra distance to create moments that matter.

• Collaboration Treat everyone with respect. Welcome diverse views. Partner acrossgeography generations and teams. Rally around final decisions.

• Innovation Always be curious (ABC).Challenge the statusquo. Experiment and fail forward.Buildfor the future.

• Grit Focus on what matters. Work with passion and persistence. Think like an owner. Deliver resultsyoureproud of.

Consilio LLC isan EEO/Affirmative Action Employer and does not discriminateon the basis ofrace color religion sex sexual orientation gender identity national origin protected veteran statusdisabilityor any other legally protected status.