Senior GRC ISMS Security Analyst - ISO 27001 & IAM Lead

Dorsey & Whitney LLP; Washington (District of Columbia); On-site; USD 114,000 - 148,000; Full time

Benefits offered by this job

Comprehensive medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

Paid time off

Job summary

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to advance our information security program. You will drive audits, risk assessments, and compliance efforts, ensuring policies and controls align with ISO 27001 and other leading frameworks while managing client security reviews.

You will partner with Information Services and business teams to execute security controls, monitor DLP effectiveness, and support pre-contract engagements.

Qualifications

• Bachelor's degree or equivalent in business, CS or related field.
• 7+ years in information security, risk, governance or audits across multiple frameworks.
• Experience with ISMS, ISO 27001, SOC2, GDPR, CSF, or NIST 800-53.
• Proven ability to conduct client and pre-contract security assessments.
• Strong report writing and stakeholder collaboration skills.

Responsibilities

• Support ISM with maintenance of security documentation amid changes.
• Produce program reports and dashboards for firm committees.
• Oversee pre/post-contract security controls and risk reviews.
• Collaborate with stakeholders to audit risk assessments and surveys.
• Assist with compliance requirements and security standards.
• Lead internal ISMS audits and management reviews.
• Maintain policies, controls, and the Statement of Applicability.
• Execute quarterly NetDocuments access reviews and DLP oversight.
• Drive RBAC and entitlement improvements across systems.

Skills

ISMS experience

ISO27001 knowledge

SOC 2 awareness

GDPR familiarity

Risk assessments

Audits coordination

Education

Bachelor's Degree in a relevant field

Tools

NetDocuments

ndMax AI

RBAC tooling

Job description

Dorsey & Whitney LLP is seeking a Senior GRC Information Security Systems Analyst to advance our information security program. You will drive audits, risk assessments, and compliance efforts, ensuring policies and controls align with ISO 27001 and other leading frameworks while managing client security reviews.

You will partner with Information Services and business teams to execute security controls, monitor DLP effectiveness, and support pre-contract engagements.