Senior GRC & InfoSec Systems Analyst

Dorsey & Whitney LLP; Denver (CO); On-site; USD 120,000 - 180,000; Full time

Job summary

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to lead and support client and pre‑contract security assessments, ISMS audits, and governance activities. You will manage documentation, maintain policies, and oversee DLP and authorization services to meet ISO 27001 and regulatory requirements.

The role partners with Information Services and business teams to drive risk assessments, RBAC improvements, and security program reporting.

Qualifications

• Experience implementing ISMS aligned to ISO 27001, SOC2, GDPR or NIST.
• Proven ability to lead audits, risk assessments, and third‑party security reviews.
• Strong communication skills for cross‑functional collaboration.

Responsibilities

• Support ISMS documentation and compliance activities across audits and risk reviews.
• Coordinate and execute internal ISMS audits and management reviews.
• Collaborate with stakeholders to implement automation for compliance controls and RBAC processes.

Skills

ISMS

RBAC design

DLP

IAM automation

Security risk

Education

Bachelor's degree in Business/CS

Tools

NetDocuments

ndMax AI chatbot

Job description

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to lead and support client and pre‑contract security assessments, ISMS audits, and governance activities. You will manage documentation, maintain policies, and oversee DLP and authorization services to meet ISO 27001 and regulatory requirements.

The role partners with Information Services and business teams to drive risk assessments, RBAC improvements, and security program reporting.