Analyst, Information Security

Overview:

About the company

Consilio stands as the global leader in eDiscovery, document review, flexible legal talent, and legal advisory & transformation consulting services. With its Consilio Complete suite of capabilities, the company empowers multinational law firms and corporations using innovative software, cost-effective managed services, and deep legal and regulatory industry expertise.

• Work within the Information Security, Privacy, and Compliance domain, supporting internal and external stakeholder requirements
• Respond to client security questionnaires, RFI/RFPs, and due diligence assessments by collaborating with cross-functional teams
• Support privacy programs and initiatives, including data protection and regulatory alignment (e.g., GDPR, HIPAA)
• Contribute to compliance and certification efforts such as ISO 27001, HITRUST, SOC 2 Type II, and other relevant frameworks
• Assist in internal and external audits, including evidence gathering, control validation, and audit coordination
• Evaluate existing security controls and recommend practical improvements for enhanced control effectiveness
• Demonstrate strong written and verbal communication skills to clearly articulate security and privacy concepts to diverse audiences
• Work independently while effectively collaborating with global teams across business and support functions
• Exhibit structured thinking and the ability to translate technical controls into business-relevant responses

Responsibilities:

• Support end-to-end handling of client security enquiries, including analysis, drafting, review, and submission of responses
• Collaborate with internal stakeholders (security, legal, IT, product, and operations teams) to ensure accurate and consistent responses

• Assist in maintaining and supporting security compliance programs (ISO 27001, SOC 2, HIPAA, GDPR, etc.)
• Participate in audit readiness activities, control testing, and documentation management
• Track and manage client-driven compliance requirements and commitments

• Contribute to privacy-related initiatives, including data impact assessments, records of processing activities, and maintain privacy documentation for the team
• Support risk remediation in security and privacy controls

• Identify opportunities to improve response quality, turnaround time, and process efficiency
• Contribute to development of knowledge repositories, standard responses, and reusable artifacts
• Support automation and tooling initiatives to streamline repetitive tasks and reporting

• Assist in tracking metrics related to client requests, SLA adherence, and quality of responses
• Contribute to ongoing process maturity and standardization efforts

Qualifications:

• Bachelor's degree with 3-4 years of direct experience in the field of information security
• Practical understanding of security standards, processes and risk frameworks
• Experience in internal audits, maintaining GRC platform
• Certified Information Systems Auditor (CISA), ISO 27001 LA credential highly recommended

Why Join Us:

• Be part of a collaborative and innovative work environment.
• Opportunity for professional growth and development.
• Competitive salary and benefits package.
• Contribute to shaping the future of our software development processes.

• Client Experience | Listen for the “why”. Clearly define success. Be accountable. Go the extra distance to create moments that matter.
• Collaboration | Treat everyone with respect. Welcome diverse views. Partner across geography, generations, and teams. Rally around final decisions.
• Innovation | Always be curious (ABC). Challenge the status quo. Experiment and fail forward. Build for the future.
• Grit | Focus on what matters. Work with passion and persistence. Think like an owner. Deliver results you’re proud of.

Consilio, LLC is an EEO/Affirmative Action Employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other legally protected status.