Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Information Governance Risk and Compliance Analyst role.

Rezi rewrites your resume against Fried Frank Business Services Opportunities's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Information Governance Risk and Compliance Analyst posting at Fried Frank Business Services Opportunities — free, in seconds.

About the Role

As an Information Governance (IG), Risk, and Compliance Analyst, you will test, evidence, and report on the controls behind the firm's IG, risk, compliance, and information security programs. You will run recurring control audits, build the queries and scripts that generate the evidence, and produce the artifacts relied upon in client audits and internal assurance work.

Responsibilities

Develop IG policies and procedures, and translate them into enforceable technical configurations and measurable controls.
Maintain an auditable inventory of data assets across Microsoft 365 and other approved information repositories, capturing classification, ownership, location, and retention state.
Contribute to enterprise-wide risk assessments, quantifying exposure from overprovisioned access, stale data, and sensitive data sprawl from platform reporting rather than self-attestation.
Develop risk mitigation strategies and control requirements, and track findings and remediation to verified closure.
Support compliance with client contractual obligations (including outside counsel guidelines), regulations, and data protection laws by implementing and evidencing the corresponding controls.
Serve as technical respondent for client audits, security questionnaires, and regulatory inquiries, mapping requests to implemented controls and assembling the evidence.
Plan and execute recurring control audits across Microsoft 365, Entra ID, Active Directory, and approved information repositories, and maintain the audit calendar, evidence library, and exception record.
Collect evidence programmatically with PowerShell, Microsoft Graph, and KQL, querying audit trails across identity, mail, file, and endpoint platforms to show a control operated over a defined period.
Perform entitlement reviews and access recertification covering nested group membership, privileged roles, service and shared accounts, dormant objects, and broadly permissioned repositories.
Test control effectiveness rather than assuming it, validating classification and DLP detection, retention and disposition execution, and alerting coverage.
Oversee of the information security program, including periodic review of security tooling configuration against approved baselines and hardening against exfiltration and insider risk.
Perform incident response and recovery tasks, including log review, containment and scoping queries, evidence preservation, and post-incident remediation tracking.
Assess third-party vendor risk in data handling, reviewing questionnaires, audit reports, and penetration test summaries against observable configuration.
Collaborate with procurement and legal teams on contractual security, audit rights, and data handling requirements.
Communicate risk, compliance, and security findings to technical and non-technical stakeholders, and maintain recurring reporting on control testing and access review results.

Requirements

3-5 years of hands-on experience in IG, compliance, IT audit, or information security, including demonstrable work running control tests or access reviews.

Skills

PowerShell
KQL
Microsoft 365
Entra ID
Active Directory
Querying platform audit logs
Analytical skills
Problem-solving skills
Communication skills

Location

New York
Washington, DC
London
Frankfurt
Brussels

Work Type

Full-time

Experience Level

Mid-level

Education Level

Bachelor's degree in a relevant field
Certifications in IT audit (e.g., CISA)
Certifications in Microsoft security and compliance administration (e.g., SC-400, SC-200)
Certifications in risk management

Salary/Compensations

$110,000—$125,000 USD

Benefits

Competitive compensation
Comprehensive benefits package
Comprehensive medical coverage
Retirement plans
Health and wellness initiatives

About the Company

Fried Frank is a community of 800 lawyers and 500 business services professionals across New York, Washington, DC, London, Frankfurt, and Brussels.
We advise leading corporations, investment funds, and financial institutions on high-stakes M&A, securities, regulatory matters, real estate, and litigation.
Our culture is grounded in our core values — excellence, integrity and collaboration — and is designed to foster continuous learning, meaningful mentorship, and lasting professional growth.
We are firmly committed to pro bono service and social justice, building on a proud legacy in civil rights.
Our inclusive talent strategy is a core part of our broader talent management efforts and we remain steadfast in fostering a workplace where everyone has the opportunity to grow, thrive, and become their best professional and personal selves.
Our business services professionals are integral to the firm’s success, driving innovation, operational excellence and exceptional client service across all areas of the firm.
We offer competitive compensation and a comprehensive benefits package, including comprehensive medical coverage, retirement plans and health and wellness initiatives designed to support your personal and professional wellbeing.
We welcome passionate, driven individuals to join us, and be part of a team where you’ll be supported, inspired and empowered to build an exceptional career.

Equal Opportunity

Our inclusive talent strategy is a core part of our broader talent management efforts and we remain steadfast in fostering a workplace where everyone has the opportunity to grow, thrive, and become their best professional and personal selves.