Senior GRC & Information Security Lead

Dorsey & Whitney LLP; Phoenix (AZ); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health benefits

Paid time off

Parental leave

Job summary

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to advance risk, governance, and compliance initiatives. You will lead client and pre-contract security assessments, organize internal ISMS audits, and maintain policies aligned to ISO 27001 and other leading frameworks, while overseeing authorization services and DLP controls.

Reporting to the Information Security Systems Manager, you will partner with stakeholders to drive security programs, RBAC improvements,

Qualifications

• Minimum 7 years in information security with ISMS and governance exposure.
• Experience across ISO 27001, SOC2, GDPR, NIST CSF, or NIST 800-53.
• Proven ability to lead audits, risk assessments, and client security reviews.

Responsibilities

• Maintain ISMS documentation and policy controls aligned to standards.
• Lead client and pre-contract security assessments and audits.
• Manage internal security reviews and management reviews.
• Collaborate with stakeholders to automate compliance processes.
• Oversee RBAC and entitlement definitions for privileged accounts.
• Support DLP program governance and regulatory mapping.
• Prepare risk assessments and present findings to leadership.

Skills

ISMS frameworks

ISO 27001

SOC 2

GDPR

NIST CSF

NIST 800-53

Risk governance

RBAC & Entitlements

DLP program

Audit & assessment

Education

Bachelor's Degree or equivalent

Tools

Azure

Entra

Microsoft 365

Microsoft Purview

Active Directory

DLP tooling

Job description

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to advance risk, governance, and compliance initiatives. You will lead client and pre-contract security assessments, organize internal ISMS audits, and maintain policies aligned to ISO 27001 and other leading frameworks, while overseeing authorization services and DLP controls.

Reporting to the Information Security Systems Manager, you will partner with stakeholders to drive security programs, RBAC improvements,