Senior GRC & ISMS Security Analyst

Dorsey & Whitney LLP; New York (NY); On-site; USD 125,000 - 155,000; Full time

Job summary

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to drive governance, risk, and compliance initiatives across audits and client engagements. You will manage ISMS processes, lead risk assessments, and oversee DLP and access reviews in a collaborative, law-firm setting.

Responsibilities include maintaining policies, coordinating audits (ISO 27001, GDPR), and supporting pre-contract security assessments while partnering with stakeholders to ensure robust information

Qualifications

• Bachelor's degree or equivalent in a related field.
• 7+ years across ISMS, audits, and governance frameworks.
• Experience with security controls, policies, and risk reviews.

Responsibilities

• Maintain ISMS documentation and policy alignment with frameworks.
• Lead internal audits and management reviews for ISO 27001 and GDPR.
• Execute pre/post-contract security controls and risk reviews.
• Oversee DLP program and quarterly NetDocuments access reviews.
• Collaborate with stakeholders to drive security consulting projects.

Skills

Information security governance

Risk assessments

Audit coordination

Compliance oversight

IAM and RBAC enhancements

DLP program management

Stakeholder collaboration

Education

Bachelor's Degree

Tools

ISO 27001

SOC 2

NIST CSF

GDPR

Job description

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to drive governance, risk, and compliance initiatives across audits and client engagements. You will manage ISMS processes, lead risk assessments, and oversee DLP and access reviews in a collaborative, law-firm setting.

Responsibilities include maintaining policies, coordinating audits (ISO 27001, GDPR), and supporting pre-contract security assessments while partnering with stakeholders to ensure robust information