Senior GRC & InfoSec Systems Analyst

Dorsey & Whitney LLP; Wilmington (DE); On-site; USD 114,000 - 150,000; Full time

Job summary

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to strengthen our Information Security program across audits, risk, governance, and compliance. You will lead client and pre-contract security assessments, manage internal ISMS audits, and ensure policies and controls align to ISO 27001 and other leading frameworks.

You will collaborate with stakeholders to automate and monitor controls, support DLP and RBAC initiatives, and drive risk assessments and remediation

Qualifications

• Bachelor's Degree or equivalent in Business, Computer Science or equivalent experience.
• At least 7 years across ISMS and multiple frameworks (ISO 27001, SOC2, GDPR, NIST CSF/800-53).
• Experience in client IT/security governance, risk assessments, and audits.
• Hands-on IAM enhancements in hybrid AD/Entra environments.
• Experience with DLP programs and human risk initiatives.

Responsibilities

• Maintain ISMS documentation and support changes in threat landscape.
• Produce information security program reports and dashboards.
• Coordinate audits, risk assessments, and ISO/GDPR recertifications.
• Advise on compliance requirements and information security standards.
• Lead RBAC and entitlement clean-up for privileged accounts and service accounts.
• Oversee DLP program controls and quarterly NetDocuments reviews.
• Support training programs and phishing simulations.

Skills

Information Security

Governance

Compliance

Audit

Risk Management

IAM / Access control

DLP

Education

Bachelor's Degree or equivalent in Business, Computer Science or equivalent experience

Tools

Azure / M365

AD Entra

SIEM / Defender

Job description

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to strengthen our Information Security program across audits, risk, governance, and compliance. You will lead client and pre-contract security assessments, manage internal ISMS audits, and ensure policies and controls align to ISO 27001 and other leading frameworks.

You will collaborate with stakeholders to automate and monitor controls, support DLP and RBAC initiatives, and drive risk assessments and remediation