Senior GRC & InfoSec Lead: Audits & Compliance

Dorsey & Whitney LLP; Denver (CO); On-site; USD 110,000 - 170,000; Full time

Job summary

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to safeguard the firm and its clients by driving high-impact security initiatives across audits, risk, governance and compliance.

Reporting to the Information Security Systems Manager, you'll lead internal ISMS audits, maintain ISO 27001-aligned policies, and coordinate pre- and post-contract security reviews while partnering with stakeholders to advance RBAC and entitlement controls.

Qualifications

• Bachelor's degree or equivalent in business or computer science.
• 7+ years' experience in ISMS, RBAC, DLP, GDPR, and audit activities.
• Experience implementing and maintaining information security policies, standards and controls.

Responsibilities

• Maintain Information Security documentation and adapt to changes in threat landscape.
• Provide program reporting for security committees and dashboards.
• Create and distribute bi-monthly Information Security communications.
• Collaborate with assessors to execute risk assessments and audits (ISO 27001, GDPR).
• Advise on compliance requirements and security standards and controls.
• Automate and monitor compliance-related controls and approved exceptions.
• Assist ISMS management with annual internal audits and reviews.
• Maintain policies and Statements of Applicability and other security documentation.
• Perform pre- and post-contract security controls and risk reviews for client requests.

Skills

ISMS maintenance

RBAC

DLP

GDPR

Audits

Risk assessments

Information security governance

Education

Bachelor's Degree or equivalent in Business, Computer Science or equivalent experience

Tools

Microsoft Azure

Microsoft 365

Microsoft Entra

Microsoft Purview

OneDrive

Teams

Sentinel

Microsoft Defender

SSO

OAuth

Zoom

Job description

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to safeguard the firm and its clients by driving high-impact security initiatives across audits, risk, governance and compliance.

Reporting to the Information Security Systems Manager, you'll lead internal ISMS audits, maintain ISO 27001-aligned policies, and coordinate pre- and post-contract security reviews while partnering with stakeholders to advance RBAC and entitlement controls.