Cybersecurity Risk and Compliance Analyst

Role Overview: As a Senior Cybersecurity Risk & Compliance Specialist at JLL, you will serve as a subject matter expert for cybersecurity risk assessments and regulatory compliance across JLL's global operations. Reporting to the Cybersecurity Compliance Manager, you will support cybersecurity program maturity initiatives, policy governance, and continuous improvement efforts while ensuring alignment with business objectives and regulatory requirements. Key Responsibilities: - Monitor changes in business processes, information systems, management, and operations, and maintain ongoing risk assessments - Perform comprehensive cybersecurity risk assessments using established methodologies (FAIR, OCTAVE, etc.) - Develop and maintain cybersecurity risk registers and treatment plans aligned with business objectives - Monitor and report on key risk indicators (KRIs) and compliance metrics - Support vendor risk management programs, including security questionnaire reviews and on-site assessments - Lead audits of control effectiveness and design, ensuring completion within established deadlines - Collaborate with internal audit teams on cybersecurity-focused audit programs - Support regulatory examinations and coordinate with external auditors and regulatory bodies - Develop, review, and maintain cybersecurity policies, standards, and procedures to ensure regulatory alignment - Establish and maintain a cybersecurity policy governance framework, including lifecycle management processes - Build and maintain productive relationships with process owners across all business functions - Assist with internal cybersecurity investigations and incident response activities - Support cybersecurity due diligence activities for mergers, acquisitions, and strategic partnerships Qualification Required: Education: - Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or Computer Engineering Professional Experience: - Minimum 4 years of IT/cybersecurity experience with focus on risk and compliance Industry & Regulatory Knowledge: - Strong understanding of compliance frameworks: ISO 27001/27002, NIST Cybersecurity Framework, SOC1/SOC2, CIS Controls Technical Expertise: - Exposure to GRC technologies and policy management platforms (ServiceNow GRC, Archer, MetricStream) Required Skills & Competencies: - Exceptional written and oral English communication skills - High-level analytical, conceptual, and problem-solving abilities - Quality-focused with high flexibility and adaptability - Ability to effectively prioritize and execute tasks in high-pressure environments Additional Company Details: This role offers the opportunity to work with cutting-edge cybersecurity technologies and frameworks while supporting JLL's global operations and digital transformation initiatives. At JLL, you will be part of a culture of collaboration that allows for transformative solutions in the real estate industry. JLL is committed to creating a brighter future for clients, employees, and the community. (Note: The additional company details section is included based on the information provided in the job description.) Role Overview: As a Senior Cybersecurity Risk & Compliance Specialist at JLL, you will serve as a subject matter expert for cybersecurity risk assessments and regulatory compliance across JLL's global operations. Reporting to the Cybersecurity Compliance Manager, you will support cybersecurity program maturity initiatives, policy governance, and continuous improvement efforts while ensuring alignment with business objectives and regulatory requirements. Key Responsibilities: - Monitor changes in business processes, information systems, management, and operations, and maintain ongoing risk assessments - Perform comprehensive cybersecurity risk assessments using established methodologies (FAIR, OCTAVE, etc.) - Develop and maintain cybersecurity risk registers and treatment plans aligned with business objectives - Monitor and report on key risk indicators (KRIs) and compliance metrics - Support vendor risk management programs, including security questionnaire reviews and on-site assessments - Lead audits of control effectiveness and design, ensuring completion within established deadlines - Collaborate with internal audit teams on cybersecurity-focused audit programs - Support regulatory examinations and coordinate with external auditors and regulatory bodies - Develop, review, and maintain cybersecurity policies, standards, and procedures to ensure regulatory alignment - Establish and maintain a cybersecurity policy governance framework, including lifecycle management processes - Build and maintain productive relationships with process owners across all business functions - Assist with internal cybersecurity investigations and incident response activities - Support cybersecurity due diligence activities for mergers, acquisitions, and strategic partnerships Qualification Required: Education: - Bachelor's degree in Comp