Senior GRC & Information Security Systems Analyst

Dorsey & Whitney LLP; Costa Mesa (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to safeguard the firm and clients through governance, risk, and compliance initiatives. You will drive ISMS audits, maintain policies aligned with ISO 27001, and oversee authorization services including NetDocuments access reviews.

Reporting to the Information Security Systems Manager, you will partner with stakeholders on security assessments, RBAC enhancements, and DLP program compliance to help ensure client

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• 7+ years across IS governance, risk, and compliance domains.
• Experience with audits and certifications (ISO 27001, GDPR, SOC2).

Responsibilities

• Support ISMS governance and maintain security documentation.
• Lead and support client and pre-contract security assessments.
• Organize internal ISMS audits and management reviews.
• Maintain policies and controls aligned to ISO 27001 and other frameworks.
• Oversee authorization services and quarterly NetDocuments access reviews.
• Partner with stakeholders to deliver cybersecurity consulting projects.
• Validate RBAC and entitlement processes; support DLP program requirements.
• Assist with risk assessments and remediation tracking with leadership.

Skills

GRC management

ISMS governance

ISO 27001

SOC 2

GDPR

NIST CSF

RBAC / IAM

DLP

Audit management

Security governance

Education

Bachelor's Degree in IT/CS/Security

Tools

NetDocuments

ndMax AI chatbot

Job description

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to safeguard the firm and clients through governance, risk, and compliance initiatives. You will drive ISMS audits, maintain policies aligned with ISO 27001, and oversee authorization services including NetDocuments access reviews.

Reporting to the Information Security Systems Manager, you will partner with stakeholders on security assessments, RBAC enhancements, and DLP program compliance to help ensure client