Senior GRC & ISMS Analyst: Security Audits & Compliance

Dorsey & Whitney LLP; Dallas (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to drive security initiatives across audits, risk, governance and compliance. The role reports to the Information Security Systems Manager and focuses on ISMS management, client assessments, and policy control maintenance.

You will coordinate internal audits, support DLP and access reviews, and collaborate with stakeholders to ensure compliance with ISO 27001, GDPR, and other leading frameworks.

Qualifications

• Experience implementing or maintaining an ISMS aligned to ISO 27001 / SOC2 / GDPR.
• Proven ability to assess, audit, and improve information security controls.
• Experience with RBAC, entitlement reviews, and identity governance.
• Strong collaboration with stakeholders and client-facing activities.
• Experience in DLP and data privacy considerations.

Responsibilities

• Support Information Security Systems Manager with maintaining Information Security documentation and controls.
• Prepare and present information security program metrics and dashboards for firm committees.
• Coordinate internal ISMS audits, management reviews, and risk assessment activities.
• Review and respond to audit findings, remediation plans and audit reports.
• Lead or participate in risk assessments, client security reviews, and pre/post-contract assessments.
• Maintain policy documentation, statements of applicability, and control evidence.

Skills

ISMS

GRC

Risk management

Audit

Policy & controls

Compliance frameworks

Education

Bachelor's degree

Tools

NetDocuments

Azure AD / Entra

RBAC tools

Job description

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to drive security initiatives across audits, risk, governance and compliance. The role reports to the Information Security Systems Manager and focuses on ISMS management, client assessments, and policy control maintenance.

You will coordinate internal audits, support DLP and access reviews, and collaborate with stakeholders to ensure compliance with ISO 27001, GDPR, and other leading frameworks.