Jobs in the United States

25+ jobs

Save this search

Added 2 mins ago
RO Business Analyst
Idaho Division of Human Resources
Boise, ID
The Idaho State Tax Commission is recruiting for a Business Analyst in its Revenue Operations Division to provide system support by managing a team of Tax Automated System Specialists…
Added 2 mins ago
AI Operations Administrator - Gravitee - Remote US
SitusAMC
Boise, ID
…Information Security and AI GRC. Governance, policy, risk acceptance, control requirements, and independent control assurance remain with those teams, and design and build of enterprise…
Added 2 mins ago
Analyst - FinanceAcct
Maximus
Boise, ID
Assist program control staff with ad hoc financial and cost analysis as requested by program management and corporate finance.
Added 8 mins ago
TH-1H Pilot/SME/Quality Analyst Principal
General Dynamics Information Technology
Daleville, AL
GDIT is the Prime contractor for the Flight School Training Support Services (FSTSS) program, which supports the United States Army Aviation Center of Excellence (USAACE). Located in…
Added 9 mins ago
Sustainment Financial Analyst (P2) *HYBRID*
RTX Corporation
huntsville, AL
…professional (P2) to assume the role of Sustainment Financial Analyst, reporting directly to the Sustainment Business Manager. You will serve as the lead for active contracts. You will be a…
Added 9 mins ago
Analyst - FinanceAcct
Maximus
Montgomery, AL
Assist program control staff with ad hoc financial and cost analysis as requested by program management and corporate finance.
Added 9 mins ago
AI Operations Administrator - Gravitee - Remote US
SitusAMC
Montgomery, AL
…Information Security and AI GRC. Governance, policy, risk acceptance, control requirements, and independent control assurance remain with those teams, and design and build of enterprise…
Added 21 mins ago
Senior Security Risk Analyst
Centene Corporation
Jefferson City, MO
…domain as assigned. These projects may include targeted risk or control initiatives, framework alignment efforts, tooling or process enhancements, regulatory or audit support activities,…
Added 23 mins ago
Accounting Analyst
BorgWarner Inc.
Auburn Hills, MI
The Accounting Analyst supports accurate and timely financial processes and identifies opportunities for continuous improvement. The ideal candidate takes initiative, challenges the status…
Added 43 mins ago
Classified Cybersecurity Analyst - TS/SCI
Northrop Grumman
Aurora, CO
Work within strict program control processes to ensure mitigation of risks and support the Assessment and Authorization (A&A) of systems. This includes process support, analysis,…
Added 43 mins ago
Senior GRC Information Security Systems Analyst
Dorsey & Whitney
Denver, CO
Join Dorsey's Information Security team as a Senior GRC Information Security Systems Analyst to help safeguard our firm and clients by driving high-impact security initiatives across…
Added 1 hour ago
CC
Finance Analyst III – Network Quality & Affordability
Centene Corporation
Cheyenne, WY
- $70,100 to $126,200 USD / year
Identify opportunities to streamline reporting, strengthen quality-control checks, standardize documentation, and reduce manual effort while preserving accuracy.
Added 1 hour ago
TD
Geospatial Analyst
The Davey Tree Expert Company
Richfield, OH
- $28 to $35 USD / hour
Process, perform quality assurance/quality control (QA/QC), and integrate field-collected GPS and attribute data into the enterprise GIS database.
Added 3 hours ago
Security Analyst
Innovative Hematology, Inc.
Indianapolis, IN
We are seeking an experienced Security Analyst to join our Information Technology team. This role bridges tactical cybersecurity defense with regulatory compliance oversight to safeguard…
Added 4 hours ago
T
Cyber Intrusion Analyst
TEKsystems
Honolulu, HI
- $50.48 to $69.72 USD / hour
This role supports a large enterprise Department of Defense program by providing real-time cyber intrusion analysis within a high-visibility Security Operations Center. You will detect,…
Added 4 hours ago
T&D Operations Analyst - Oahu
Hawaiian Electric
Honolulu, HI
…Energy Delivery with accurate and timely analysis of project and program performance and progress consistent with approved budgets and milestones. Serves as a key resource for initiating,…
Added 4 hours ago
Senior Analyst, Financial Reporting
Signature Aviation
Orlando, FL
The Senior Financial Reporting Analyst is a key member of the Financial Reporting and Controllership team. The role supports the accurate and timely consolidation, analysis, and reporting…
Added 4 hours ago
Software Configuration Analyst
Lockheed Martin
Kirtland AFB, NM
…configuration management tools to support configuration identification, control, reporting, and delivery of both internally developed and externally purchased commercial-off-the-shelf…
Added 4 hours ago
Senior Microbiologist
Curia
Albuquerque, NM
Working as a core member of the NPI Tech Transfer Team, the SME collaborates closely with Program Management, Operations, Quality, Regulatory, as a member of the customer-facing team,…
Added 5 hours ago
Analyst - FinanceAcct
Maximus
Annapolis, MD
Assist program control staff with ad hoc financial and cost analysis as requested by program management and corporate finance.
Added 5 hours ago
MTT UAS Advisor/Trainer
CACI International
Aberdeen Proving Ground, MD
Assist with vulnerability site assessments to inform analyst team about possible use of UAS.
Added 5 hours ago
MTT UAS Advisor/Trainer
CACI International
Aberdeen Proving Ground, MD
Assist with vulnerability site assessments to inform analyst team about possible use of UAS.
Added 5 hours ago
Senior Technical Writer
CACI International
Aberdeen Proving Ground, MD
Maintains document version control, configuration management discipline, and compliance with program documentation standards and Army/DoD writing guidelines.
Added 5 hours ago
HR Specialist
ITW
Washington, NC
…Coeur and Filtertek, supplying critical filtration and flow control solutions to global OEM’s, serving Surgical, Infusion, Bioprocessing and Diagnostic Imaging end…
Added 6 hours ago
SUPERVISORY FINANCIAL MANAGEMENT ANALYST
Naval Medical Command
Fort Sam Houston, TX

Dorsey & Whitney

Senior GRC Information Security Systems Analyst

Denver, CO, United States

Apply About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Oct 21, 2026

Original job description

Join Dorsey's Information Security team as a Senior GRC Information Security Systems Analyst to help safeguard our firm and clients by driving high-impact security initiatives across audits, risk, governance, and compliance. Reporting directly to the Information Security Systems Manager, you'll lead and support client and pre-contract security assessments, organize and execute internal ISMS audits and management reviews, maintain current policies and controls aligned to ISO 27001 and other leading frameworks, and oversee authorization services and quarterly NetDocuments access reviews. You'll partner with stakeholders to deliver cybersecurity consulting projects, validate repeatable RBAC and entitlement processes, and ensure our DLP program meets client, ISO, and regulatory requirements to make a tangible difference in the resilience and trust our clients expect. Key Responsibilities Include: • Support Information Security Systems Manager with the maintenance of Information Security documentation, supporting changes in the organization, technology, or threat landscape. • Provide Information Security Program reporting related to metrics and dashboards for various Dorsey committees as requested by Information Security Systems Manager. • Create and oversee the distribution of Bimonthly Information Security communications released Firm wide. • Collaborate with Firm and Information Services process owners and stakeholders, internal and external assessors and auditors to execute and review risk assessments, internal and external surveillance audits resulting in the recertification (e.g., ISO 27001, GDPR). Document audit findings, remediation action plans and audit report responses. • Consult with Information Services teams, Dorsey Business Teams and advise on Compliance requirements, and Information Security Standards and Controls. • Collaborate with Information Services team stakeholders to implement processes that automate and continuously monitor Compliance-related, Information Security Standard controls, and approved exceptions. • Assist GRC and Information Security management with ISMS continuous operation, monitoring, and improvement of the Information Security Management System (ISMS) by organizing and executing annual internal audits and management reviews. • Maintain Compliance-related documentation, including policies, procedures, Statement of Applicability, are current and reflect any changes in the organization, technology, or threat landscape. • Complete Client-generated pre- and post-contract security controls and risk review assessment, audits, in support of Dorsey client requests. • Review and provide security input into Client RFP Responses. Support Marketing and Business Development teams with RFP response requests as they pertain to Information Security information. • Perform Dorsey-requested pre-contract security controls and risk review of technology, software, and services. • Maintain Dorsey SIG Questionnaire and ndMax AI chatbot, collaborating with key Information Services stakeholders for its currency. • Assist the Information Security Systems Manager with project-based risk assessments, interviewing, collecting data, and documenting risk. May be asked to present risk assessment results to Head of Cybersecurity and CIO for discussion and drive decision-making. Document risk decision in risk register if necessary. • Maintain Firm Technology Risk Register, provide reporting and coordinate meetings with Information Services Leadership to discuss open risk items and remediation actions. • Support the Information Security Systems Manager in the creation of an annual Firm-wide Annual Security Awareness Training Program, Human Risk Initiative, with Phish Simulation Testing. • Support the delivery of a focused 8-week training program for currently hired business professionals, New Hired business professionals training. • Support the delivery of multi-month, Firm- ide Phish Simulation Testing. • Prepare Human Risk reporting and update Human Risk Calculations and additional training assigned by the Information Security Systems Manager. • Execute the project-based enhancement of RBAC, Rights, Permissions, Groups, and Entitlement Definition and Clean-Up for Privileged Accounts (PIM), Service Accounts, and User Accounts, this position will support the ongoing Identity & Authorization Services Compliance Oversight process. • Execute post-project oversight process will validate the defined, repeatable process being followed to ensure all user, privileged users, and service accounts maintain security to reduce risk of unauthorized access. • Execute oversight process to ensure assurance is validated, repeatable processes are being followed to ensure all human and nonhuman accounts maintain security that reduce risk of unauthorized access and shrink attack surfaces. • Perform the quarterly NetDocuments access review as assigned. • Support the DLP Program Execution and Oversight to ensure the DLP controls meet Client, ISO, Information Governance, and Regulatory requirements. • May perform other duties not listed above. What we're looking for: • Bachelor's Degree or equivalent in Business, Computer Science or equivalent experience. • At least 7 years of demonstrated experience across three of the following: o Implementing or maintaining an Information Security Management System (ISMS) aligned to one or more of the following compliance frameworks: o ISO, ISO 27001:2022, SOC2, GDPR, NIST Cybersecurity Framework (CSF), or NIST 800-53. o Implementing or maintaining information security policies, standards, controls, guidelines, and procedures in one or more of the following compliance frameworks: • ISO 27001:2022, SOC2, GDPR, NIST Cybersecurity Framework (CSF), or NIST 800-53. o Client-request assessment, audit experience and IT/Security technology, software security risk assessment reviews. • Similar technology/information security focused experience with minimum of 7 years' experience with at least three of the following core areas: o Compliance and security function. o Information security risk management and risk frameworks. o Client IT/security governance and audit. o Security awareness training programs. • At least 7 years of demonstrated experience spanning the following: o Successful planning, preparing, and delivery of audit (re)certification, authorization of in-scope technology asset compliance environments and boundaries. o Performing client security risk assessments, RFP Cybersecurity responses, contract reviews, and data privacy agreements o Perform Third-Party Vendor Technology and Service Security Risk Assessments and ongoing Monitoring. o Hands-on experience defining, implementing, and maintaining annual information security training program including annual program definition of annual training, technical team role-specific training, phish simulation training program definition and its execution, and reporting. • At least 5-7 years of hands on experience driving IAM enhancements using automation and tooling across hybrid AD/Entra hybrid environments, including group and role analysis, AD permission cleanup, RBAC design and implementation, least privilege enforcement, privileged access reduction, and integration of IAM with HR and IT lifecycle workflows. • At least 5--7 years of governance and oversight hands on experience executing Data Loss Prevention (DLP) and Human Risk program enhancement initiatives, including defining data in scope, implementing data classification and tagging, DLP policies and alerting requirements, performing initial analysis of data flows and risks, and partnering with SOC, IT, and business teams to ensure ongoing compliance and control effectiveness. • Excellent written and verbal communication skills; demonstrated experience, communicating and collaborating effectively acr

Apply About employer

Report this job