Barnes & Thornburg
Information Security GRC Analyst
Philadelphia +1 · Hybrid · Full-time · Posted Oct 26, 2026
- Location
- Philadelphia
Indianapolis - Experience
- 2 years of relevant experience in IT, Risk Management, or Information Security; internships or academic coursework may be considered.
- Education
- Bachelor’s degree or equivalent experience.
About the job
Supports the firm’s technology risk management program by assessing and tracking risks, maintaining security governance processes, and assisting with audits, vendor reviews, policies, and awareness activities.
What you'll do
- Help assess technology risks, maintain the Information Security Risk Register, and support risk reporting and reviews of IT changes.
- Assist with ISO-aligned ISMS and PIMS operations, security policies, control tracking, audits, and client security questionnaires.
- Support third-party risk assessments, security awareness and training, and integration of security controls into continuity planning.
What they ask for
- Bachelor’s degree or equivalent experience.
- 2 years of relevant experience in IT, Risk Management, or Information Security; internships or academic coursework may be considered.
- Familiarity with IT risk and threat assessment methodologies and security governance, compliance, or control frameworks.
- Technical knowledge in at least one area such as IT infrastructure, systems engineering, networking, or application development.
Nice to have
- Entry-level security or IT certifications such as CompTIA Security+ or ISC2 Certified in Cybersecurity (CC); interest in pursuing CISSP or CISA.
- Familiarity with project management tools such as Microsoft Project, Asana, or Trello.
Tools
ISO 27001:2022, ISO 27701:2019, SOC 2 Type II, TCP/IP, SMTP, FTP, SSH, TLS
Model-written summary · the original posting is authoritative