DLA Piper is, at its core, bold, exceptional, collaborative and supportive. Our people are the backbone, heart and soul of our firm. Wherever you are in your professional journey, DLA Piper is a place you can engage in meaningful work and grow your career. Let’s see what we can achieve. Together.

Summary

The Information Security Compliance Analyst will assist with assessing, monitoring and executing a portion of the Information Security Program. This includes specific activities such as conducting risk assessments, internal/external compliance assessments, and the day-to-day operation of the vendor and security awareness programs. This position is also responsible for working closely with all physical security resources as well as the IT department to conduct and monitor key controls related to data loss, leakage and insider threat. A high level of personal organization, persistence, communications, and attention to detail is a must.

Location

This position can sit in our Baltimore, Washington D.C., or Northern Virginia office(s) and offers a hybrid work schedule.

Responsibilities

Performs technology risk assessment activities such as access control audits for systems, applications, infrastructure and operational processes
Maintain a current working knowledge of applicable privacy laws and monitor advancements information privacy and security technologies to ensure adaptation and compliance
Develop and deliver security awareness and compliance training programs.
Support vendor-focused risk assessments that evaluates the environment and estimate the level and trends of inherent risk
Proactively identify vendor-related risk across the assigned internal and external projects
Work with security awareness partners to create innovative security awareness and training materials, tools and processes that assist in effectively changes behaviors
Documenting compliance findings and risks, as well as championing recommendations for remediation
Assist in evaluating any related external frameworks or standards or internal policies/standards to determine the relevant IT compliance requirements and controls
Participate in the change management process ensuring that all releases are compliant with security standards
Provide strategic and tactical direction and consultation on information security and compliance

Desired Skills  

Experience in ISO27001 and NIST Frameworks; compliance training or certifications; security auditing; project management
Experience with Drata preferred
Background in computer management, information assurance
Knowledge of information security principles including risk assessment and management, threat and vulnerability management, and incident response
Experience in developing, documenting, and maintaining security procedures
A proven record as an effective communicator both verbal and written
Ability to prioritize and execute tasks in a high-pressure environment
Strong analytical mindset
Ability to work in a team-oriented, collaborative environment
Understanding of how to develop metrics to measure the success of an information security program
Ability to work independently and has strong workflow management
Ability to exercise good judgement and appropriate decision making within scope of job

Minimum Education   

Bachelor’s Degree in Information Security, Cybersecurity or similar fields

Preferred Education 

Master’s Degree in Information Security, Cybersecurity or similar fields preferred
Professional-level industry certification (e.g. CISSP, GIAC, SANS, etc.) preferred

Minimum Experience

2+ years of IT experience
3+ years of demonstrated hands-on experience working in IT security, IT risk or IT Audit space

Essential Job Expectations

While the specific job requirements of a DLA Piper position may vary depending upon scope of the job and area of specialty, there are certain universal requirements that are expected of all DLA Piper employees, which include but are not limited to:

Effectively communicate, verbally and in writing, with clients, lawyers, business professionals, and third parties
Produce deliverables, answer phone calls, and reply to correspondence in an efficient and responsive manner
Provide timely, accurate, and quality work product
Successfully meet deadlines, expectations, and perform work duties as required
Foster positive work relationships
Comply with all firm policies and practices
Engage in both physical and sedentary activity, such as (a) working at a computer for extended periods of time, including on-screen reading and typing; (b) participating in digital/virtual conference calls; (c) participating in meetings as needed
Ability to work under pressure and manage competing demands in a fast-paced environment
Perform all other duties, tasks or projects as assigned

Our employees are expected to embrace and uphold our firm values as a part of our DLA Piper culture. We are committed to excellence in how we represent our clients and develop our people.

Physical Demands

Sedentary work: Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.   

Work Environment   

The individual selected for this position may have the opportunity for a hybrid work arrangement comprised of remote and in-office work, the requirement for which will be determined in coordination with the hiring manager or supervisor and may be modified in the firm’s discretion in the future.

Disclaimer   

The purpose of this job description is to provide a concise statement of the work elements and to organize and present the information in a standardized way. It is not intended to describe all the elements of the work that may be performed by every individual in this classification, nor should it serve as the sole criteria for personnel decisions and actions. The job duties, requirements, and expectations for this position may be modified at the Firm’s discretion at any time. This job description does not change the at-will nature of employment.

Application Process    

Applicants must apply directly online instead of sending application materials via email.

Accommodation   

Reasonable accommodations may be made upon request to permit individuals with a disability to perform the essential functions and responsibilities of the position or to participate in the job selection process. If you have a request for an accommodation during the application process, please contact careers@us.dlapiper.com.

Agency applications will not be considered.    

No immigration sponsorship is available for this position.   

The firm’s expected hiring range for this position is $84,366 - $117,111 per year depending on the candidate’s geographic market location.

The compensation offered for employment will also be dependent on other factors including the candidate’s experience, skills, educational and professional background, and overall qualifications. We offer a comprehensive package of benefits including medical/dental/vision insurance, and 401(k).

#LI-SB1
#LI-Hybrid

DLA Piper is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Job applicant poster viewing center.