Senior GRC & InfoSec Systems Analyst – Audit & Compliance

Dorsey & Whitney LLP; New York (NY); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Paid time off

Parental Leave

Job summary

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to drive high-impact security initiatives across audits, risk, governance, and compliance. You'll lead client and pre-contract assessments, maintain ISMS documentation, and oversee DLP and access reviews to ensure ISO 27001 alignment and regulatory compliance.

Reporting to the Information Security Systems Manager, you’ll collaborate with stakeholders to deliver cybersecurity programs, support risk assessments, and

Qualifications

• Bachelor's Degree or equivalent in Business, Computer Science or equivalent experience.
• 7+ years across ISMS, security governance, and audits.
• Experience with ISO 27001, GDPR, SOC2, NIST CSF or 800-53.
• Strong IAM, DLP, and risk assessment skills.

Responsibilities

• Maintain ISMS documentation and support policy updates.
• Lead internal ISMS audits and management reviews.
• Coordinate client pre-contract security assessments and RFP responses.
• Oversee NetDocuments access reviews and DLP program alignment.
• Collaborate with stakeholders to automate compliance controls.

Skills

ISMS governance

Security risk management

Audits & compliance

Information security controls

RBAC/Identity & Access

Education

Bachelor's degree in Business/CS/IS

Tools

NetDocuments

ndMax AI chatbot

GRC tooling

Job description

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to drive high-impact security initiatives across audits, risk, governance, and compliance. You'll lead client and pre-contract assessments, maintain ISMS documentation, and oversee DLP and access reviews to ensure ISO 27001 alignment and regulatory compliance.

Reporting to the Information Security Systems Manager, you’ll collaborate with stakeholders to deliver cybersecurity programs, support risk assessments, and