Junior Governance, Risk & Compliance Analyst

Davis Wright Tremaine LLP

. Support the Security Office's governance, risk management, compliance, client assurance, and third-party risk management functions .

Posted 10/2/2026full-timeRemote • United StatesJunior💰 $91,000 - $122,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity governance, risk management, and compliance, with a strong focus on audit processes and documentation management. Proficient in utilizing security frameworks such as ISO 27001 and NIST CSF while managing sensitive information and coordinating with various stakeholders.

Highest-signal resume keywords

Cybersecurity GovernanceRisk ManagementAudit Documentation ManagementISO 27001 ComplianceMicrosoft 365 Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityComplianceAuditRisk ManagementGovernanceDocumentation ManagementContract ReviewVendor AssessmentSecurity FrameworksAI-Assisted Research

Soft Skills

Strong Written CommunicationOrganizational SkillsAnalytical SkillsProject ManagementConfidential Information Management

Tools & Technologies

Microsoft 365Document Control ToolsAudit Tracking DatabasesEvidence RepositoriesSecurity Metrics Development Tools

Industry Keywords

ISO 27001NIST CSFSOC 2Legal OperationsHighly Regulated Environments

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Support the Security Office's governance, risk management, compliance, client assurance, and third-party risk management functions
Assist with client security audits and assessments
Gather, organize, and maintain audit evidence packages
Coordinate supporting documentation collection from multiple business units
Draft responses to customer security questionnaires using approved evidence repositories
Track audit deliverables, deadlines, and open requests
Maintain client audit documentation and records
Review client Outside Counsel Guidelines for cybersecurity, privacy, AI governance, incident response, and compliance requirements
Document security requirements and contractual obligations
Track OCG-derived security requirements and remediation activities
Support Security Office recommendations and exception documentation
Maintain OCG tracking databases and reporting artifacts
Support vendor cybersecurity reviews and due diligence activities
Review vendor security questionnaires, SIG responses, SOC reports, certifications, attestations, and supporting evidence
Document security findings, risks, recommendations, and compensating controls
Track vendor remediation activities and review cycles
Maintain vendor assessment records and documentation libraries
Support periodic vendor reevaluations and monitoring activities
Support ISO 27001, internal audit, client audit, and regulatory readiness activities
Assist with evidence management and document control
Verify security policies, standards, procedures, and records remain current
Participate in audit preparation exercises and gap assessments
Track corrective actions and audit observations
Maintain governance documentation repositories
Assist with security policy review activities
Monitor compliance tracking programs
Support security metrics development and reporting
Assist with risk register and remediation tracking activities
Contribute to process improvement and automation initiatives
Update SOPs, standards, procedures, and knowledge base content
Maintain audit, OCG, and vendor review records
Coordinate with Procurement, Information Governance, Legal, and Security Operations stakeholders

Requirements

What you’ll need

2 years of experience in cybersecurity, compliance, audit, risk management, legal operations, governance, or related fields
Bachelor's Degree in Cybersecurity, Information Systems, Business Administration, Risk Management, Legal Studies, or related field preferred
Equivalent combination of education and experience may be considered
Strong written communication and documentation skills
Proficiency using Microsoft 365 applications
Ability to manage sensitive and confidential information
Strong organizational and analytical skills
Ability to manage multiple concurrent projects and deadlines
Exposure to cybersecurity governance or compliance activities
Understanding of common security frameworks, including ISO 27001, NIST CSF, and SOC 2
Experience reviewing contracts, questionnaires, audit requests, or vendor documentation
Familiarity with professional services, legal, or highly regulated environments
Experience using AI-assisted research and document analysis tools

Benefits

Comp & perks

Choice of health and vision insurance plans
2 paid volunteer days for qualifying community service work
Dental plan
Fertility and adoption benefit
Paid sabbatical after 13 years of service
Tuition reimbursement
Commuter benefits
Retirement contribution
Bonus eligibility for full-time employees
Optional HSA
Long-term disability insurance
Telemedicine and virtual short-term solution-based counseling services
Life insurance
Healthcare and Dependent Care Flexible Spending Accounts
Subsidized backup care and caregiving resources
401(k)
Vacation
Sick time
11 paid holidays each year
Employee assistance program
Voluntary accident insurance
Voluntary life insurance
Voluntary disability insurance
Voluntary long-term care insurance
Pet insurance
Commuter and Transit programs
Professional growth opportunities
Community involvement opportunities
Inclusive and authentic workplace culture