Information Security GRC Analyst

DISCO logo


View Salaries, Reviews, and more  

Job Summary

Job Type


Years of Experience
Information not provided

Tech Stacks
Azure AWS

Job Description

Profile Summary

A brief statement of the general nature and purpose of the job and its core functions.

The Information Security GRC Analyst supports the security governance and risk and compliance programs. They perform reviews, assessments, and audits, conduct research, and facilitate communication to internal and external stakeholders where necessary. They monitor, coordinate, and implement documentation to support security, compliance, and audit requirements. They ensure compliance with our audit obligations and drive continual improvement in our risk and cyber-security posture.

Key Accountabilities

List of major or essential job accountabilities.

Information Security Compliance Program: Supports the information security programs including risk management and compliance testing. Coordinates security risk assessment activities and security compliance audits. Contributes to security audit procedures relevant to SOC 2 & ISO 27001. Improves and operationalizes vendor security and compliance programs.

Compliance and Audits: Improves existing compliance programs and processes. Designs and executes audit procedures to assess and measure company compliance with its security policies and procedures. Participates in compliance testing and monitoring of regulatory obligations, and other regulatory matters as required. Assists in responding to 3rd party assessments; maintains a library of security and compliance documentation.

Reporting and Documentation: Collects, analyzes, and prepares reports required for senior management, regulators, and other relevant stakeholders. Works closely with internal stakeholders on resolution of risk and compliance issues. Documents, investigates, and reports cybersecurity compliance issues and incidents. Supports activities related to contingency planning, business continuity management, and IT disaster recovery. Maintains and improves information security policies.


The minimum years and specific experience required to perform this job.

3+ years of experience in security operations, risk or compliance management

1+ years of IT or other relevant technical experience

Significant knowledge and experience with ISO 27001 and SOC2

Experience coordinating tasks to complete third party assessments

Experience writing clear and concise policies, procedures, or controls in one or more standards/frameworks

Other Preferred Experience For The Position

Experience securing the public cloud (AWS, GCP, Azure)

Experience responding to third-party risk management questionnaires from client and customer organizations


Key 3-5 specific skills or knowledge required to be able to fulfill the job requirements.

Knowledge of computer networking concepts and protocols and network security methodologies

Knowledge of risk management processes

Knowledge of cyber threats and vulnerabilities

Ability to advance multiple projects concurrently

Excellent oral and written communication skills, with the ability to clarify complex topics to both technical and non-technical audiences

Perks of DISCO

  • Open, inclusive, and fun environment
  • Benefits, including medical and dental insurance
  • Competitive salary plus discretionary bonus
  • Opportunity to be a part of a startup that is revolutionizing the legal industry
  • Growth opportunities throughout the company


DISCO provides a cloud-native, artificial intelligence-powered legal solution that simplifies ediscovery, legal document review and case management for enterprises, law firms, legal services providers and governments. Our scalable, integrated solution enables legal departments to easily collect, process and review enterprise data that is relevant or potentially relevant to legal matters.

Are you ready to help us fulfill our mission to use technology to strengthen the rule of law? Join us!

We are an equal opportunity employer and value diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Interview Questions of Information Security GRC Analyst at DISCO

Currently, there aren't any interview questions for this role at DISCO shared by other job seekers.
View more interview questions of similar roles from other companies โ†’
banner icon
Prepare For Your Interview in 1 Week?
Equip yourself with possible questions that interviewers might ask you, based on your work experience and job description.
Get Started!

Salary Insights of Information Security GRC Analyst at DISCO

Currently, there aren't any salaries for this role at DISCO shared by other job seekers.

View more salaries from DISCO โ†’

Achieve your dream job with our top-notch tools!

Resume Checker Illustration

Resume Checker

Our free resume checker analyzes the job description and identifies important keywords and skills missing from your resume in just a minute!

Check Now
Interview Preparation Illustration

AI InterviewPrep

Utilizing advanced AI, our tool generates tailored interview questions based on your industry, role, and experience. Practice and receive feedback on your answers in real time!

Check Now
Resume Builder Illustration

Resume Builder

Let us show you the differences between a bad, good, and great resume, and guide you in building a resume that helps you stand out to employers, ensuring you land your next position faster!

Check Now