Job Description
Job description
Join Dentons US LLP as a Regulatory Compliance Specialist, where you will play a vital role in coordinating governance and compliance activities across our dynamic organization. With a focus on delivering top-notch support for legal services and compliance systems, you will help implement risk management initiatives and ensure that client and administrative data is managed in accordance with ethical, legal, and contractual standards.
Your Key Responsibilities Include:
• Reviewing client information security requirements, questionnaires, and assessments; preparing comprehensive responses and supporting documents.
• Developing and managing an evidence collection calendar for CMMC & SOC 2 Type 2 testing periods; coordinating the collection, validation, and retention of evidence that demonstrates effective operations.
• Maintaining and enhancing a control matrix that maps NIST/ISO control frameworks, SOC 2 Trust Services Criteria (TSC), CMMC practices, and client requirements.
• Assisting in the development, maintenance, evaluation, and implementation of policies and procedures aligned with business requirements and legislative changes (e.g., ISO 27001/22301, HIPAA), incorporating SOC 2 Type 2 and CMMC requirements as applicable.
• Keeping an inventory of improvement opportunities and actions; preparing regular reports on compliance trends across ISO/NIST/SOC 2/CMMC domains.
• Managing governance inventories for client security notification requirements and regulatory/contractual obligations.
• Tracking ad hoc client notifications and requests related to information security, such as vulnerability notifications and control validation requests.
• Collaborating with Risk Management and IT to implement and operate security controls required by clients and security frameworks (e.g., access restrictions, logging/monitoring, vulnerability management).
• Assisting with the Third-Party Risk Management (TPRM) program by enhancing vendor and cloud service provider inventories and evaluating risk artifacts.
• Performing additional duties as assigned to adapt to the evolving Information Security program and compliance capabilities.
Experience & Qualifications:
• A minimum of 3 years in an Information Security or Security Compliance role.
• Solid understanding of information security controls, governance principles, and standards/frameworks such as SOC 2 and CMMC.
• Hands-on experience coordinating at least one full SOC 2 Type 2 examination cycle.
• Practical experience with NIST SP 800-171 controls, building and maintaining SSPs and POA&Ms; familiarity with CMMC 2.0 levels.
• Experience with GRC or evidence management tools for mapping controls and managing audits.
• Strong communication skills; ability to translate technical controls into business-friendly language.
• Ability to prioritize, work under deadlines, and collaborate across teams.
• Strong analytical and problem-solving skills, with a continuous improvement mindset.
• Knowledge of cross-border regulations like GDPR is a plus.
• Industry certifications such as CISSP, CISA, CISM, or CRISC are a plus.
Salary:
Chicago Only DOE: $73,760 - $94,000
Washington DC Only DOE: $75,280 - $96,000
Dentons US LLP offers a competitive salary and comprehensive benefits package including medical, dental, vision, 401k, profit sharing, short-term/long-term disability, life insurance, tuition reimbursement, paid time off, paid holidays, and discretionary bonuses.
Dentons US LLP is an Equal Opportunity Employer - Disability/Vet. We consider for employment qualified applicants with arrest and conviction records.
About Dentons:
Redefining possibilities. Together, everywhere. For more information visit our website.
Nearest Major Market: Chicago
Join Dentons US LLP as a Regulatory Compliance Specialist, where you will play a vital role in coordinating governance and compliance activities across our dynamic organization. With a focus on delivering top-notch support for legal services and compliance systems, you will help implement risk management initiatives and ensure that client and administrative data is managed in accordance with ethical, legal, and contractual standards.
Your Key Responsibilities Include:
• Reviewing client information security requirements, questionnaires, and assessments; preparing comprehensive responses and supporting documents.
• Developing and managing an evidence collection calendar for CMMC & SOC 2 Type 2 testing periods; coordinating the collection, validation, and retention of evidence that demonstrates effective operations.
• Maintaining and enhancing a control matrix that maps NIST/ISO control frameworks, SOC 2 Trust Services Criteria (TSC), CMMC practices, and client requirements.
• Assisting in the development, maintenance, evaluation, and implementation of policies and procedures aligned with business requirements and legislative changes (e.g., ISO 27001/22301, HIPAA), incorporating SOC 2 Type 2 and CMMC requirements as applicable.
• Keeping an inventory of improvement opportunities and actions; preparing regular reports on compliance trends across ISO/NIST/SOC 2/CMMC domains.
• Managing governance inventories for client security notification requirements and regulatory/contractual obligations.
• Tracking ad hoc client notifications and requests related to information security, such as vulnerability notifications and control validation requests.
• Collaborating with Risk Management and IT to implement and operate security controls required by clients and security frameworks (e.g., access restrictions, logging/monitoring, vulnerability management).
• Assisting with the Third-Party Risk Management (TPRM) program by enhancing vendor and cloud service provider inventories and evaluating risk artifacts.
• Performing additional duties as assigned to adapt to the evolving Information Security program and compliance capabilities.
Experience & Qualifications:
• A minimum of 3 years in an Information Security or Security Compliance role.
• Solid understanding of information security controls, governance principles, and standards/frameworks such as SOC 2 and CMMC.
• Hands-on experience coordinating at least one full SOC 2 Type 2 examination cycle.
• Practical experience with NIST SP 800-171 controls, building and maintaining SSPs and POA&Ms; familiarity with CMMC 2.0 levels.
• Experience with GRC or evidence management tools for mapping controls and managing audits.
• Strong communication skills; ability to translate technical controls into business-friendly language.
• Ability to prioritize, work under deadlines, and collaborate across teams.
• Strong analytical and problem-solving skills, with a continuous improvement mindset.
• Knowledge of cross-border regulations like GDPR is a plus.
• Industry certifications such as CISSP, CISA, CISM, or CRISC are a plus.
Salary:
Chicago Only DOE: $73,760 - $94,000
Washington DC Only DOE: $75,280 - $96,000
Dentons US LLP offers a competitive salary and comprehensive benefits package including medical, dental, vision, 401k, profit sharing, short-term/long-term disability, life insurance, tuition reimbursement, paid time off, paid holidays, and discretionary bonuses.
Dentons US LLP is an Equal Opportunity Employer - Disability/Vet. We consider for employment qualified applicants with arrest and conviction records.
About Dentons:
Redefining possibilities. Together, everywhere. For more information visit our website.
Nearest Major Market: Chicago
💡 Quick Summary
Seeking a career-building opportunity? The Regulatory Compliance Specialist position is now open for candidates interested in the Remote Jobs sector. This role in Atlanta offers a professional environment and growth potential.
Requirement Snapshot: Candidates should possess basic communication skills, a proactive attitude, and the ability to work in a team. Experience in Remote Jobs is a plus.