Senior GRC & ISMS Security Strategist

Dorsey & Whitney LLP; Palo Alto (CA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Dorsey & Whitney LLP seeks a Senior GRC Information Security Systems Analyst to drive high-impact security initiatives across audits, risk, governance and compliance. You will lead risk assessments, ISMS audits, and DLP program oversight while coordinating with stakeholders to ensure regulatory and client requirements are met.

Reporting to the Information Security Systems Manager, you will maintain policies, manage authorization services, and advance repeatable security controls across the

Qualifications

• Bachelor’s Degree or equivalent in Business, Computer Science or equivalent experience.
• ,
• ],
• job_responsibilities_description

Responsibilities

• Maintain Information Security documentation and respond to changes in the organization, tech, or threats.
• Provide program reporting and dashboards for security committees and leadership.
• Lead and coordinate internal ISMS audits and management reviews.
• Review and recertify risk assessments and audit findings with remediation plans.
• Collaborate with Information Services to implement IAM, RBAC, and access controls.
• Oversee DLP program effectiveness and alignment to client and regulatory requirements.
• Support client pre/post-contract security controls and RFP responses.
• Maintain and update risk registers and monthly security communications.

Skills

ISMS

Governance & Risk

Audits & Certifications

RBAC & IAM

DLP

Security Compliance

Vendor Security Risk

Education

Bachelor’s Degree in Business or CS

Tools

NetDocuments

ndMax AI chatbot

Microsoft Azure / Entra

Microsoft Purview

Job description

Dorsey & Whitney LLP seeks a Senior GRC Information Security Systems Analyst to drive high-impact security initiatives across audits, risk, governance and compliance. You will lead risk assessments, ISMS audits, and DLP program oversight while coordinating with stakeholders to ensure regulatory and client requirements are met.

Reporting to the Information Security Systems Manager, you will maintain policies, manage authorization services, and advance repeatable security controls across the