Senior GRC & ISMS Security Analyst

Dorsey & Whitney LLP; Seattle (WA); On-site; USD 114,000 - 148,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

Paid time off

Job summary

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to safeguard client and firm data. You will drive ISMS audits, maintain policies aligned to ISO 27001, and oversee authorization services and NetDocuments reviews.

The role partners with stakeholders to implement automation for RBAC/entitlements and ensure DLP meets regulatory requirements. The ideal candidate has 7+ years in governance, risk, audits, and information security, with strong communication skills and

Qualifications

• Bachelor's degree or equivalent in Business, Computer Science or related field.
• 7+ years across ISMS, ISO 27001, SOC2, GDPR, NIST CSF/NIST 800-53.
• Experience implementing or maintaining information security policies, controls, and procedures.

Responsibilities

• Maintain ISMS documentation and policies in response to organizational changes.
• Lead risk assessments, audits, and management reviews with internal/external stakeholders.
• Oversee DLP program compliance and regulatory mappings to client requirements.

Skills

ISMS governance

Risk management

Audits & compliance

Security awareness

RBAC and IAM

Education

Bachelor's degree or equivalent

Tools

Azure AD / Entra

Microsoft 365

Microsoft Defender

NetDocuments

Job description

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to safeguard client and firm data. You will drive ISMS audits, maintain policies aligned to ISO 27001, and oversee authorization services and NetDocuments reviews.

The role partners with stakeholders to implement automation for RBAC/entitlements and ensure DLP meets regulatory requirements. The ideal candidate has 7+ years in governance, risk, audits, and information security, with strong communication skills and