Senior GRC & InfoSec Systems Lead (Hybrid)

Dorsey & Whitney LLP; Costa Mesa (CA); Hybrid; USD 114,000 - 148,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) with firm match

Paid time off

Job summary

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to advance our Information Security program. You will drive audits, risk management, governance, and compliance initiatives and partner with stakeholders to protect client data across ISO 27001, GDPR, and other standards.

You will lead internal audits, maintain policies, and support pre-contract security reviews, RBAC improvements, and DLP program alignment to meet client requirements and regulatory expectations.

Qualifications

• 7+ years in information security with ISMS, risk, governance, or compliance.
• Experience implementing or maintaining ISO 27001 or SOC2 based programs.
• Experience with client security assessments, audits, and RFP responses.

Responsibilities

• Maintain Information Security documentation and policies.
• Lead internal ISMS audits and management reviews.
• Collaborate with stakeholders to execute risk assessments and review controls.
• Support DLP, RBAC, and entitlement processes to meet regulatory requirements.
• Prepare and deliver risk reports to leadership and clients.

Skills

ISMS

ISO 27001

SOC 2

GDPR

NIST CSF

Risk management

Education

Bachelor's Degree or equivalent

Tools

NetDocuments

ndMax AI chatbot

Job description

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to advance our Information Security program. You will drive audits, risk management, governance, and compliance initiatives and partner with stakeholders to protect client data across ISO 27001, GDPR, and other standards.

You will lead internal audits, maintain policies, and support pre-contract security reviews, RBAC improvements, and DLP program alignment to meet client requirements and regulatory expectations.