---
title: 'Information Security GRC Analyst at Barnes & Thornburg LLP'
canonical: 'https://feeny.ai/job/information-security-grc-analyst-barnes-thornburg-llp-philadelphia-ex4r0hw39zfq'
type: 'job'
last_seen: '2026-10-27'
---

# Information Security GRC Analyst at Barnes & Thornburg LLP

- **Company:** Barnes & Thornburg LLP
- **Location:** Philadelphia, PA
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-10-26
- **Last confirmed live:** 2026-10-27
- **Apply:** https://jobs.ashbyhq.com/barnes/a9fbe277-0b82-4079-b8e6-e33200c13af9

## Job description

Summary: As a member of the Information Security team, the Information Security GRC Analyst supports the firm’s technology risk management policies, procedures, and guidelines. This role helps ensure that technology risks are measured, prioritized, and appropriately maintained in the risk register. Working under the direction of the Information Security Governance Manager, the GRC Analyst will help analyze, document, and track risks related to business operations, and will support the monitoring and improvement of risk management processes. Key Responsibilities:

- Serve as a point of contact for IT and non-IT stakeholders on technology-related risk questions, escalating issues to senior team members and management as appropriate.
- Support other professionals in technology risk management, covering areas such as risk assessments, security policy and documentation management, third-party risk management, and ISO 27001 ISMS operations.
- Help identify and assess technology-related risks and maintain the Information Security Risk Register.
- Assist with periodic risk reporting to executive management, documenting management’s response to identified risks.
- Assist with IT Risk Assessments for on-premises and cloud-based infrastructure, platforms, applications, and key technology services, in line with IT Risk Management Methodology.
- Help assess the risks associated with major IT changes and technology implementations.
- Track and process exceptions and waivers related to internal security standards, unapproved software, web/email content filtering, password policies, etc.
- Work with IT Infrastructure to help ensure that security controls are integrated into Business Continuity/Disaster Recovery planning, ensuring the continuity of security controls where applicable.
- Assist with the operation of the Information Security Management System (ISMS) and Privacy Information Management System (PIMS) in alignment with ISO 27001:2022 and ISO 27701:2019 standards.
- Track and maintain security control requirements from various sources, including ISO 27001 annex controls, client requirements, legal/regulatory guidelines, and other relevant frameworks.
- Assist in responding to security audits, questionnaires, and assessments from clients and external parties, supporting marketing and procurement teams with security-related content for client RFPs and vendor agreements.
- Help analyze business and IT processes from an information security perspective and identify potential improvements.
- Review policies and procedures to help ensure security control requirements are adequately covered, suggesting updates and improvements as necessary.
- Support the periodic review and update of security policies in accordance with firm guidelines.
- Support the Security Awareness Program, including assisting with planning and curriculum development.
- Assist with content creation and delivery schedules for both broad and targeted security training.
- Monitor and report on participation in the awareness program, helping to address any compliance issues.
- Assist with periodic assessments of IT vendor relationships, helping ensure that third-party risk management issues are resolved and tracked.
- Assist with security reviews of vendor agreements in coordination with the Procurement and Legal teams.

Additional Responsibilities:

- Perform other duties related to information security as assigned.

The employee must be able to perform all essential job duties and responsibilities of this position satisfactorily and as outlined, with or without reasonable accommodations. Reasonable accommodation requests may be accommodated, absent undue firm hardship. Qualifications:

- Bachelor’s degree or equivalent experience.
- 2 years of relevant experience in IT, Risk Management, or Information Security; internships or academic coursework may be considered.
- Entry-level security or IT certifications such as CompTIA Security+, ISC2 Certified in Cybersecurity (CC), or similar preferred; interest in pursuing advanced certifications such as CISSP or CISA.
- Familiarity with IT risk and threat assessment methodologies.
- Exposure to or familiarity with security governance, compliance, or control frameworks, including ISO 27000 series, SOC 2 Type II.
- Familiarity with IT security policies, procedures, and standards.
- Technical knowledge in at least one area such as IT infrastructure, systems engineering, networking, or application development.
- Familiarity with operating systems, application architectures, and security technologies.
- Working knowledge of network and security protocols, including TCP/IP, SMTP, FTP, SSH, TLS, SSL, HTTP, IPSec, and other VPN protocols.
- Basic understanding of IT concepts such as networks, systems and databases, as well as foundational cybersecurity principles (e.g. risk management, threat management, vulnerability assessments).
- Strong proficiency in Microsoft Office Suite (Excel, PowerPoint, Word, Outlook) with advanced skills in Excel for data analysis, tracking and reporting.
- Ability to work in a fast-paced and demanding environment and respond to shifting priorities while meeting deadlines.
- Excellent oral and written communication skills; must be able to articulate issues and information accurately, clearly and succinctly.
- Strong analytical and problem-solving abilities needed to address complex questions and issues.
- Must have strong organizational skills and be extremely detail-oriented; attention to detail, high-level of accuracy, issue-tracking, follow-up and resolution skills are essential.
- Ability to maintain confidentiality and discretion of sensitive information.
- Ability to work collaboratively and, with guidance, independently; eagerness to learn and develop GRC skills.
- Familiarity with project management tools (e.g. Microsoft Project, Asana, Trello) preferred.

Working Conditions:

- Normal office environment with little exposure to excessive noise, dust, temperature and the like.
- Specific work hours for this position will be assigned; generally, core business hours. The requirements may vary occasionally, depending on the needs of the Firm.

The above is intended to describe the general content of and requirements for the performance of this job. It is not to be construed as an exhaustive statement of essential functions, responsibilities or requirements.Subject to firm needs, duties and responsibilities of this position may change at any time, on a temporary or permanent basis, and with or without notice. Equal Employment and Opportunity Statement: Barnes & Thornburg is committed to equal employment opportunity in both principle and as a matter of policy. We will recruit, hire, train, promote, compensate and provide benefits to all applicants and employees without regard to ancestry, sex, race, color, ethnicity, national origin, gender, age, religion, religious creed, mental and/or physical disability, medical condition, military and/or veteran’s status, genetic information, marital status, sexual orientation, gender identity and/or expression, or any other basis protected by applicable federal, state and local laws. This policy applies to all recruiting, hiring, promotions, upgrades, layoffs, compensation, benefits, terminations and all other privileges, terms and conditions of employment. The firm complies fully with all federal, state and local equal employment opportunity laws.

## About Barnes & Thornburg LLP

## Company Overview
- **One-liner**: Barnes & Thornburg LLP is a large, full-service U.S. law firm providing legal services across more than 50 practice areas to clients ranging from Fortune 500 corporations to entrepreneurial growth companies.
- **Entity Type**: Private (LLP / Partnership)
- **Headquarters**: Indianapolis, Indiana, USA
- **Founded**: Not publicly available
- **Founders**: Not publicly available

## Core Business
- **Primary industry/industries**: Legal Services
- **Target customers**: B2B – Fortune 500 corporations, middle-market companies, entrepreneurial growth companies, and government entities.
- **Mission or purpose statement**: “We don’t just grow, we thrive. From day one, you’ll have access to industry-leading support, tools and training, all tailored to meet your needs today — and propel you where you want to go tomorrow.” (from careers page)

## Products & Services
- **[Full-Service Legal Counsel]**: Representation in over 50 practice areas including litigation, labor and employment, intellectual property, corporate, health care, real estate, energy, white collar crime, life sciences, and finance/restructuring.
- **[Client-Focused Platform]**: Customizable rate-setting, origination credit policies, and dedicated business development/marketing teams to help partners grow their practices.
- **[Career Development Programs]**: Structured training for lawyers at every level – BTLaw Academy (junior associates), Pathway to Partnership (mid-to-senior lawyers), and Partner Development Series.

## Market Standing
- **Valuation/Market Cap**: Not applicable (private partnership)
- **Key Metric**: Employs more than 700 attorneys and other legal professionals; specifically 772 lawyers (including 481 partners) across 24 U.S. offices.
- **Notable Investors/Partners**: Not applicable (law firm partnership). No external investors listed.
- **Growth Signals**: Consistent growth trajectory with a lateral retention rate “high above industry average.” Recent expansion of practices in private equity, funds, Latin America, and securities regulation. 24 offices nationwide.

## Competitive Advantages
- **Transparent Partnership Path**: More partners than associates, with clear benchmarks and a structured process to capital partnership.
- **Collaborative Compensation Culture**: Origination credit that recognizes contributions from day one; team success valued over individual tallies.
- **Small-Firm Feel, National Reach**: Despite having 24 offices, the firm emphasizes cross-office collaboration and a collegial environment where individual ideas matter.
- **High Lateral Retention**: Strong integration support and technology infrastructure for seamless moves.

## Strategic Focus
- **Practice Expansion**: Actively building teams in high-growth areas such as private equity, funds, Latin America, and securities regulation.
- **Talent Development**: Investing in formal mentorship, sponsorship (Project Keymaker), and twice-yearly performance evaluations to grow lawyers internally.
- **Client Service**: Maintaining a clients-first culture that prioritizes service and agility in a changing business landscape.

## Why Work Here
- **Career Growth**: Accelerated path to partnership, alternative career paths for those not seeking partnership, and clear compensation structures at every level.
- **Training & Mentorship**: Robust programs like BTLaw Academy, Pathway to Partnership, and one-on-one coaching for legal writing, communication, and time management.
- **Culture**: Described as a workplace that values individuals, not just credentials. Lawyers have a voice through the Legal Talent Development Committee and Associate Committee.
- **Work Environment**: In-office presence expected (multiple U.S. office locations). Hybrid/remote policy not specified; likely office-centric with some flexibility.
- **Notable Perks**: Dedicated business development and marketing support, customizable rate-setting, and a collaborative compensation model that rewards team success.

## Sources
1. [btlaw.com – Careers Overview](https://btlaw.com/en/careers)
2. [btlaw.com – Lawyers & Legal Professionals Careers](https://btlaw.com/en/careers/lawyers)
3. [U.S. News – Barnes & Thornburg LLP Profile](https://law.usnews.com/law-firms/barnes-&-thornburg-llp-613)
4. [jobs.ashbyhq.com – Barnes & Thornburg Jobs](https://jobs.ashbyhq.com/barnes)

## Other roles at Barnes & Thornburg LLP

- [Healthcare Associate](https://feeny.ai/job/healthcare-associate-barnes-thornburg-llp-indianapolis-b8qhdgdany02) — Indianapolis, IN
- [IP Docket Specialist](https://feeny.ai/job/ip-docket-specialist-barnes-thornburg-llp-raleigh-yjvn92dgzyrr) — Raleigh, NC
- [Real Estate Paralegal](https://feeny.ai/job/real-estate-paralegal-barnes-thornburg-llp-indianapolis-zf68w4fc936t) — Indianapolis, IN
- [Legal Administrative Assistant](https://feeny.ai/job/legal-administrative-assistant-barnes-thornburg-llp-dallas-4p8exs80tdw5) — Dallas, TX
- [Office Services and Events Assistant](https://feeny.ai/job/office-services-and-events-assistant-barnes-thornburg-llp-wilmington-a6datxz8ev66) — Wilmington, DE
- [Accounting Assistant AP/GL](https://feeny.ai/job/accounting-assistant-ap-gl-barnes-thornburg-llp-indianapolis-kx169amksrtn) — Indianapolis, IN
- [Private Client Services – Trust & Estate Administration – Counsel](https://feeny.ai/job/private-client-services-trust-estate-administration-counsel-barnes-thornburg-xxgta9mgpn2e) — Indianapolis, IN
- [Private Client Services Associate](https://feeny.ai/job/private-client-services-associate-barnes-thornburg-llp-indianapolis-vyp9h9cb3pnk) — Indianapolis, IN
- [Data Privacy and AI Associate](https://feeny.ai/job/data-privacy-and-ai-associate-barnes-thornburg-llp-dallas-ederrafqa6nv) — Dallas, TX
- [Data Privacy and AI Associate](https://feeny.ai/job/data-privacy-and-ai-associate-barnes-thornburg-llp-atlanta-51bvxg9pysre) — Atlanta, GA