Job
Description
JLL supports the Whole You, personally and professionally.
Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology to our clients. We are committed to hiring the best, most talented people in our industry; and we support them through professional growth, flexibility, and personalized benefits to manage life in and outside of work. Whether you’ve got deep experience in commercial real estate, skilled trades, and technology, or you’re looking to apply your relevant experience to a new industry, we empower you to shape a brighter way forward so you can thrive professionally and personally.
Cybersecurity Risk & Compliance Analyst
Reporting to the Cybersecurity Risk Manager, the Cybersecurity Risk & Compliance Analyst provides analytical support across core cybersecurity risk management processes, including exceptions management, issues management, and the cybersecurity risk register, as well as policies and standards maintenance and risk metrics/KPI reporting. This role contributes to cybersecurity program initiatives, policy maintenance, and risk monitoring while learning from senior team members and gaining exposure to business operations.
Key Responsibilities
Exceptions Management
Support the end-to-end exceptions lifecycle, including reviewing exception assessments, performing risk analysis, and coordinating with subject matter experts (SMEs) to validate risk ratings
Prepare exception submissions for approval and acceptance, ensuring documentation meets process and audit standards
Track exception status, expirations, and renewals, and follow up with control/process owners as needed
Maintain exceptions management tooling and templates to support consistent intake and processing
Issues Management
Process and risk-rate individual instances of non-compliance identified through audits, assessments, or self-identification
Work with control owners to validate issue details, root cause, and remediation plans
Track issues through to closure, escalating overdue or high-risk items as appropriate
Maintain issue management documentation and evidence files
Risk Register
Support processing and risk rating of organization-wide cybersecurity risks for inclusion in the risk register
Help maintain and update risk treatment plans under guidance
Support vendor and third-party risk management activities, including questionnaire reviews and evaluation of third-party security controls
Assist with cybersecurity due diligence for business initiatives and embedding requirements into business processes
Policies & Standards Maintenance
Work with policy and standards SMEs to ensure verbiage remains accurate, current, and aligned to regulatory and organizational requirements
Support the annual policy review cycle, tracking review dates and coordinating updates with business units
Help maintain the cybersecurity policy repository with proper version control
Assist with development of cybersecurity awareness training materials
Metrics & KPIs
Track and compile key risk indicators (KRIs) and metrics across Risks, Issues, Exceptions, and Policies/Standards workflows
Support preparation of board and management-level reporting on program metrics
Help identify trends or gaps in metrics to support continuous improvement
Required Experience & Education
Education
Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or Computer Engineering
Equivalent combination of education and professional experience will be considered
Professional Experience
2-3 years of IT/cybersecurity experience with exposure to risk and compliance
2-3 years contributing to multi-site or multi-country initiatives
Experience supporting compliance and risk management activities in IT environments
Exposure to internal audits of IT operations, applications, or projects
Basic experience with cybersecurity policy development or implementation
Familiarity with cybersecurity risk assessment methodologies
Industry & Regulatory Knowledge
Basic understanding of compliance frameworks: ISO 27001/27002, NIST Cybersecurity Framework, SOC1/SOC2, NIST AI RMF
Awareness of data privacy regulations (GDPR, CCPA, etc.)
Exposure to regulatory examinations or external audits
Basic understanding of business continuity principles
Technical Exposure
Familiarity with GRC technologies and policy management platforms
Basic knowledge of network security, cloud security, and application security concepts
Understanding of cybersecurity maturity models
Experience with security control documentation and testing support
Required Skills & Competencies
Communication & Collaboration
Strong written and oral English communication skills
Good technical writing skills for documentation
Ability to explain technical concepts to business audiences
Effective communication with colleagues and management
Analytical & Problem-Solving
Strong analytical and problem-solving abilities
Good research skills and attention to detail
Ability to support risk assessments and document findings
Proactive approach to identifying issues
Professional Qualities
Quality-focused with flexibility and adaptability
Ability to prioritize tasks effectively
Team player with collaborative approach
Eager to learn and develop professionally
Preferred Qualifications
Industry Experience
Exposure to corporate environments (financial services, telecommunications, utilities)
Real estate services industry awareness
Multi-jurisdictional compliance exposure
Technical Knowledge
Exposure to GRC technologies and policy management platforms (ServiceNow GRC, Archer, MetricStream)
Knowledge of network security, cloud security, application security, and penetration testing concepts
Understanding of threat intelligence and its application to risk assessments
Familiarity with cybersecurity metrics and reporting
Familiarity with cybersecurity maturity models (C2M2, NIST CSF, etc.)
Experience with security control testing and validation techniques
Professional Development
Working toward relevant certifications (CISA, CISM, CRISC)
ITIL Foundation or similar process certifications
Success Metrics
Quality and timeliness of analytical support and documentation
Successful completion of assigned risk management tasks
Contribution to risk tasks including exceptions, issues, and risks.
Support quality for policy maintenance and awareness initiatives
Professional development progress and certification advancement
Why JLL
At JLL, we are collectively shaping a brighter way — for our clients, ourselves, and our fellow employees. We choose to take the more inspiring, innovative, and optimistic path on our journey toward success. What sets JLL apart is our culture of collaboration, locally and across the globe, which allows us to create transformative solutions for the real estate industry.
If this job description resonates with you, we encourage you to apply, even if you don’t meet all the requirements. We’re interested in getting to know you and what you bring to the table!
If this job description resonates with you, we encourage you to apply even if you don’t meet all of the requirements below. We’re interested in getting to know you and what you bring to the table!
Personalized benefits that support personal well-being and growth:
JLL recognizes the impact that the workplace can have on your wellness, so we offer a supportive culture and comprehensive benefits package that prioritizes mental, physical and emotional health.
About JLL –
We’re JLL—a leading professional services and investment management firm specializing in real estate. We have operations in over 80 countries and a workforce of over 102,000 individuals around the world who help real estate owners, occupiers and investors achieve their business ambitions. As a global Fortune 500 company, we also have an inherent responsibility to drive sustainability and corporate social responsibility. That’s why we’re committed to our purpose to shape the future of real estate for a better world. We’re using the most advanced technology to create rewarding opportunities, amazing spaces and sustainable real estate solutions for our clients, our people, and our communities.
Our core values of teamwork, ethics and excellence are also fundamental to everything we do and we’re honored to be recognized with awards for our success by organizations both globally and locally.
Creating a diverse and inclusive culture where we all feel welcomed, valued and empowered to achieve our full potential is important to who we are today and where we’re headed in the future. And we know that unique backgrounds, experiences and perspectives help us think bigger, spark innovation and succeed together.
