Senior GRC InfoSec Lead – ISO 27001 & Audits

Dorsey & Whitney LLP; Seattle (WA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Excellent benefits

Paid time off

Parental leave

Job summary

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to safeguard the firm and clients by driving security initiatives across audits, risk, governance, and compliance in Seattle. You will lead client and pre-contract security assessments, support ISMS audits, and maintain policies aligned to ISO 27001 and other leading frameworks.

Reporting to the Information Security Systems Manager, you will oversee authorization services, NetDocuments access reviews, RBAC and

Qualifications

• Bachelor's Degree or equivalent in Business, Computer Science or equivalent experience.
• At least 7 years across ISMS, compliance frameworks (ISO27001/27002, SOC2, GDPR, NIST CSF/800-53).
• Experience leading audits, risk assessments, and client IT/security governance.

Responsibilities

• Maintain Information Security documentation and policies.
• Lead ISMS audits and management reviews.
• Support risk assessments and surveillance audits (ISO 27001, GDPR).
• Collaborate with stakeholders to implement automation for compliance controls.
• Oversee NetDocuments access reviews and DLP program.
• Deliver security input for RFP responses and client engagements.

Skills

Security governance

Risk management

Audit coordination

Policy development

Compliance awareness

Education

Bachelor's Degree in Business/CS

Tools

NetDocuments

ndMax AI chatbot

RBAC tooling

Job description

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to safeguard the firm and clients by driving security initiatives across audits, risk, governance, and compliance in Seattle. You will lead client and pre-contract security assessments, support ISMS audits, and maintain policies aligned to ISO 27001 and other leading frameworks.

Reporting to the Information Security Systems Manager, you will oversee authorization services, NetDocuments access reviews, RBAC and