Lead Governance, Risk, and Compliance (GRC) Analyst

Lead Governance, Risk, and Compliance (GRC) Analyst

This role can be based in San Francisco, Palo Alto, Los Angeles, San Diego, Denver, Austin, Boston, New York or Washington, D.C. (see https : / / www.mofo.com / offices ). This role requires a strong leader with expertise in information security governance and ISO 27001.

Overview

At MoFo, we couldn’t write our own success story without yours. Ready to write your story? Join MoFo as a LEAD GRC ANALYST on our Information Technology team!

About The Role

The Lead Governance, Risk, and Compliance (GRC) Analyst is responsible for managing the firm’s information security governance, risk, and compliance program. This role serves as the operational lead for maintaining ISO 27001 certification, managing client and vendor audits, overseeing policy governance, and ensuring continuous audit readiness across all systems and jurisdictions.

Governance, Risk & Compliance

• Lead and manage the firm’s Information Security Management System (ISMS) to maintain ISO 27001 certification and ongoing compliance.
• Develop, implement, and monitor controls aligned with ISO 27001, NIST 800-53, DOJ, and CISA EO 14117 frameworks.
• Serve as the primary liaison for internal, external, client, and vendor security audits, including documentation, evidence, and remediation tracking.
• Manage the firm’s compliance calendar and ensure timely completion of assessments, certifications, and audits.
• Improve compliance processes through automation, standardized evidence tracking, and enhanced reporting.
• Oversee the governance and maintenance of security and privacy policies to ensure alignment with frameworks and regulatory requirements.
• Conduct risk assessments and document mitigation strategies.
• Collaborate with IT, Legal, Privacy, and business units to ensure consistent control implementation and reporting.
• Track and report key performance metrics to measure compliance posture and program maturity.

Audit & Compliance Leadership

Policy and Documentation Management

Program Maturity and Process Improvement

Client Service and Confidentiality

About You

Core Competencies And Applied Skills

About MoFo

At MoFo, we collaborate as one firm, across borders, practice areas, and business functions and value fresh ideas and innovation over conformity and competition.

Our Benefits

Compensation

Where required by law, salary ranges are stated below. Additional compensation may include a discretionary bonus, overtime as applicable, health / welfare benefits, retirement contributions, paid holidays, and PTO. The range displayed is specifically for positions performed in those cities / states and may vary based on factors including but not limited to the following : local market data and ranges; an applicant's skills and prior relevant experience; and certain degrees, licensing, and certifications.

The application deadline is May 13, 2026.

For questions regarding this position, please e-mail jobs@mofo.com

#J-18808-Ljbffr