Senior GRC & InfoSec Systems Lead

Dorsey & Whitney LLP; Salt Lake City (UT); On-site; USD 120,000 - 170,000; Full time

Job summary

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to lead client and pre-contract security assessments and ISMS audits across governance, risk, and compliance. You will maintain policies aligned to ISO 27001 and oversee NetDocuments access reviews while supporting RBAC and entitlement processes and DLP initiatives to meet regulatory demands.

You will partner with stakeholders, coordinate with the Information Security Systems Manager, and drive risk assessments and

Qualifications

• Bachelor's Degree or equivalent in Business, Computer Science or related field.
• 7+ years across security domains including ISMS/audit/governance.
• Experience with privacy/security frameworks (ISO 27001, GDPR, NIST).

Responsibilities

• Maintain Information Security documentation and policy updates.
• Provide program reporting and dashboards for security committees.
• Lead pre-contract and client security assessments and audits.
• Collaborate with assessors, auditors and stakeholders for risk reviews.
• Support RBAC/entitlement processes and DLP controls.
• Maintain NetDocuments access reviews and ndMax chatbot currency.
• Assist with annual security awareness training programs.

Skills

GRC

ISMS

RBAC

DLP

Auditing

Education

Bachelor's degree or equivalent

Tools

NetDocuments

ndMax AI chatbot

RBAC tooling

Job description

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to lead client and pre-contract security assessments and ISMS audits across governance, risk, and compliance. You will maintain policies aligned to ISO 27001 and oversee NetDocuments access reviews while supporting RBAC and entitlement processes and DLP initiatives to meet regulatory demands.

You will partner with stakeholders, coordinate with the Information Security Systems Manager, and drive risk assessments and