Jobs in the United States

25+ jobs

Save this search

Added 9 mins ago
Registered Nurse (O-2/O-3/O-4 Billet) Non-Supervisory
Immigration and Customs Enforcement
Eloy, AZ
…care. Performs record keeping functions in accordance with program policies. May prepare statistical information, regularly scheduled reports, or special reports as necessary. Attends…
Added 9 mins ago
Facility Health and Safety Officer (O-5 Billet) Non-Supervisory
Immigration and Customs Enforcement
Eloy, AZ
…and response. Serves as a key member of IHSC National PHSP program initiatives, excluding tuberculosis (TB) and infection disease (ID) programs, not limited to attending regional/national…
Added 9 mins ago
Registered Nurse (O-2/O-3/O-4 Billet) Non-Supervisory
Immigration and Customs Enforcement
Florence, AZ
…care. Performs record keeping functions in accordance with program policies. May prepare statistical information, regularly scheduled reports, or special reports as necessary. Attends…
Added 18 mins ago
BP
Manager of IT Security
Babcock Power
Louisville, KY
- $120,000 to $165,000 USD / year
The Manager of IT Security provides leadership for day-to-day security operations while helping advance the organization’s security strategy, operating model, and program maturity. This…
Added 18 mins ago
BP
Manager of IT Security
Babcock Power
Marlborough, MA
- $120,000 to $165,000 USD / year
The Manager of IT Security provides leadership for day-to-day security operations while helping advance the organization’s security strategy, operating model, and program maturity. This…
Added 22 mins ago
Electronic Industrial Controls Mechanic Supervisor
Veterans Affairs, Veterans Health Administration
Albuquerque, NM
Added 24 mins ago
Principal Technical Product Manager, Data & Platform
GE Aerospace
Kansas City, MO
…Defense & Systems (D&S) business, the Principal Technical Product Manager, Data & Platform owns the D&S Palantir Foundry environment and leads delivery across the technical teams that build…
Added 24 mins ago
Principal Technical Product Manager, Data & Platform
GE Aerospace
Saint Louis, MO
…Defense & Systems (D&S) business, the Principal Technical Product Manager, Data & Platform owns the D&S Palantir Foundry environment and leads delivery across the technical teams that build…
Added 38 mins ago
Director of Business Operations
Avint
Remote, United States
…well-reasoned recommendations, establish clear operating standards and controls, and lead cross-functional initiatives from definition through measurable results. The Director serves as a…
Added 38 mins ago
A
Assessment Lead
Avint
Remote, United States
- $150,000 to $165,000 USD / year
…critical government contract. The Assessment Lead is a Security Controls Assessor (SCA) responsible for overseeing a team of cybersecurity professionals dedicated to assessing, testing, and…
Added 38 mins ago
A
Cybersecurity SME (Hanscom AFB)
Avint
Hanscom Air Force Base, MA
- $175,000 to $190,000 USD / year
Assist in the development and enhancement of a common controls program to provide inheritability evidence to systems hosted in the environment.
Added 45 mins ago
Retail Merchandising & Inventory Supervisor
Staples
Waynesville, NC
Full-time hours, generous paid time off, career development program and weekly pay
Added 45 mins ago
Engineering Manager - PPA Engineering Development Program
Siemens
Wendell, NC
We are looking for an Engineering Manager, Power Protection & Automation Engineering Development Program . This position will be based at our corporate headquarters in Wendell, North…
Added 45 mins ago
Engineering Manager, Production Technician Development Program & Early Career
Siemens
Wendell, NC
…Automation, including the Production Technician Development Program (PTDP), internships, co-ops, apprenticeships, and support for engineering development pathways. You will build structured…
Added 45 mins ago
Engineering Manager - PPA Field Technician Development Program
Siemens
Wendell, NC
We are looking for an Engineering Manager, PPA Field Technician Development Program. This hybrid position will be based at our corporate headquarters in Wendell, North Carolina.
Added 45 mins ago
Inventory Management Specialist
Veterans Affairs, Veterans Health Administration
Garner, NC
…System, for the Garner Outpatient Clinic. Serves as an Inventory Manager in the Commodity Management Division in a Veteran Affairs Health Care System (VA HCS) and supported catchment area,…
Added 45 mins ago
Inventory Management Specialist (Expendable Supplies)
Veterans Affairs, Veterans Health Administration
Durham, NC
…Durham, NC VA Medical Center (VAMC). Serves as an Inventory Manager in the Commodity Management Division in a Veteran Affairs Health Care System (VA HCS) and supported catchment area, with…
Added 45 mins ago
Administrative Officer
Veterans Affairs, Veterans Health Administration
Durham, NC
…administrative management responsibility for a wide range of functional program staff that are assigned, matrixed, or deployed to Surgical Care Service. Responsibilities The Administrative…
Added 45 mins ago
Senior Manager, Internal and External Reporting
Eliassen Group
Raleigh, NC
The Senior Manager will have significant exposure to senior finance leadership and external auditors and will lead a team of accounting and reporting professionals. The ideal candidate…
Added 1 hour ago
M
Principal Security Operations Engineering Manager
Microsoft
CA · Sunnyvale, CA · Sunnyvale
- $142,800 to $304,200 USD / year
As a Principal Security Engineering Manager in the Microsoft AI Infrastructure Information Security team, you will build and lead a team of security engineers responsible for product and…
Added 1 hour ago
Snr Manufacturing Engineer
Federal Mogul Powertrain, LLC
Cambridge, OH
Added 1 hour ago
Copy Operator
CK Construction Group
Westerville, OH
Added 1 hour ago
Regulatory Compliance and Financial Crime Consulting Senior Manager
Crowe LLP
Cleveland, OH
…Regulatory Compliance and Financial Crime Consulting Senior Manager This role will lead complex consulting engagements supporting financial institutions, FinTechs, and other regulated…
Added 1 hour ago
Field Service Technician, Commercial
Telsa Motors, Inc
Cincinnati, OH
…Commercial Field Service Technician, you will report to the Field Manager and provide diagnostic, troubleshooting, preventive and corrective maintenance services to Tesla's energy products…
Added 1 hour ago
Project Manager I or Project Manager II
Duke Energy Ohio, Inc
Cincinnati, OH
…desired qualifications of the successful applicant, the hiring manager may elect to fill this position at a higher level within the job hierarchy Project Manager I position has single point…

Dorsey & Whitney

Senior GRC Information Security Systems Analyst

Denver, CO, United States

Apply About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Oct 21, 2026

Original job description

Join Dorsey's Information Security team as a Senior GRC Information Security Systems Analyst to help safeguard our firm and clients by driving high-impact security initiatives across audits, risk, governance, and compliance. Reporting directly to the Information Security Systems Manager, you'll lead and support client and pre-contract security assessments, organize and execute internal ISMS audits and management reviews, maintain current policies and controls aligned to ISO 27001 and other leading frameworks, and oversee authorization services and quarterly NetDocuments access reviews. You'll partner with stakeholders to deliver cybersecurity consulting projects, validate repeatable RBAC and entitlement processes, and ensure our DLP program meets client, ISO, and regulatory requirements to make a tangible difference in the resilience and trust our clients expect. Key Responsibilities Include: • Support Information Security Systems Manager with the maintenance of Information Security documentation, supporting changes in the organization, technology, or threat landscape. • Provide Information Security Program reporting related to metrics and dashboards for various Dorsey committees as requested by Information Security Systems Manager. • Create and oversee the distribution of Bimonthly Information Security communications released Firm wide. • Collaborate with Firm and Information Services process owners and stakeholders, internal and external assessors and auditors to execute and review risk assessments, internal and external surveillance audits resulting in the recertification (e.g., ISO 27001, GDPR). Document audit findings, remediation action plans and audit report responses. • Consult with Information Services teams, Dorsey Business Teams and advise on Compliance requirements, and Information Security Standards and Controls. • Collaborate with Information Services team stakeholders to implement processes that automate and continuously monitor Compliance-related, Information Security Standard controls, and approved exceptions. • Assist GRC and Information Security management with ISMS continuous operation, monitoring, and improvement of the Information Security Management System (ISMS) by organizing and executing annual internal audits and management reviews. • Maintain Compliance-related documentation, including policies, procedures, Statement of Applicability, are current and reflect any changes in the organization, technology, or threat landscape. • Complete Client-generated pre- and post-contract security controls and risk review assessment, audits, in support of Dorsey client requests. • Review and provide security input into Client RFP Responses. Support Marketing and Business Development teams with RFP response requests as they pertain to Information Security information. • Perform Dorsey-requested pre-contract security controls and risk review of technology, software, and services. • Maintain Dorsey SIG Questionnaire and ndMax AI chatbot, collaborating with key Information Services stakeholders for its currency. • Assist the Information Security Systems Manager with project-based risk assessments, interviewing, collecting data, and documenting risk. May be asked to present risk assessment results to Head of Cybersecurity and CIO for discussion and drive decision-making. Document risk decision in risk register if necessary. • Maintain Firm Technology Risk Register, provide reporting and coordinate meetings with Information Services Leadership to discuss open risk items and remediation actions. • Support the Information Security Systems Manager in the creation of an annual Firm-wide Annual Security Awareness Training Program, Human Risk Initiative, with Phish Simulation Testing. • Support the delivery of a focused 8-week training program for currently hired business professionals, New Hired business professionals training. • Support the delivery of multi-month, Firm- ide Phish Simulation Testing. • Prepare Human Risk reporting and update Human Risk Calculations and additional training assigned by the Information Security Systems Manager. • Execute the project-based enhancement of RBAC, Rights, Permissions, Groups, and Entitlement Definition and Clean-Up for Privileged Accounts (PIM), Service Accounts, and User Accounts, this position will support the ongoing Identity & Authorization Services Compliance Oversight process. • Execute post-project oversight process will validate the defined, repeatable process being followed to ensure all user, privileged users, and service accounts maintain security to reduce risk of unauthorized access. • Execute oversight process to ensure assurance is validated, repeatable processes are being followed to ensure all human and nonhuman accounts maintain security that reduce risk of unauthorized access and shrink attack surfaces. • Perform the quarterly NetDocuments access review as assigned. • Support the DLP Program Execution and Oversight to ensure the DLP controls meet Client, ISO, Information Governance, and Regulatory requirements. • May perform other duties not listed above. What we're looking for: • Bachelor's Degree or equivalent in Business, Computer Science or equivalent experience. • At least 7 years of demonstrated experience across three of the following: o Implementing or maintaining an Information Security Management System (ISMS) aligned to one or more of the following compliance frameworks: o ISO, ISO 27001:2022, SOC2, GDPR, NIST Cybersecurity Framework (CSF), or NIST 800-53. o Implementing or maintaining information security policies, standards, controls, guidelines, and procedures in one or more of the following compliance frameworks: • ISO 27001:2022, SOC2, GDPR, NIST Cybersecurity Framework (CSF), or NIST 800-53. o Client-request assessment, audit experience and IT/Security technology, software security risk assessment reviews. • Similar technology/information security focused experience with minimum of 7 years' experience with at least three of the following core areas: o Compliance and security function. o Information security risk management and risk frameworks. o Client IT/security governance and audit. o Security awareness training programs. • At least 7 years of demonstrated experience spanning the following: o Successful planning, preparing, and delivery of audit (re)certification, authorization of in-scope technology asset compliance environments and boundaries. o Performing client security risk assessments, RFP Cybersecurity responses, contract reviews, and data privacy agreements o Perform Third-Party Vendor Technology and Service Security Risk Assessments and ongoing Monitoring. o Hands-on experience defining, implementing, and maintaining annual information security training program including annual program definition of annual training, technical team role-specific training, phish simulation training program definition and its execution, and reporting. • At least 5-7 years of hands on experience driving IAM enhancements using automation and tooling across hybrid AD/Entra hybrid environments, including group and role analysis, AD permission cleanup, RBAC design and implementation, least privilege enforcement, privileged access reduction, and integration of IAM with HR and IT lifecycle workflows. • At least 5--7 years of governance and oversight hands on experience executing Data Loss Prevention (DLP) and Human Risk program enhancement initiatives, including defining data in scope, implementing data classification and tagging, DLP policies and alerting requirements, performing initial analysis of data flows and risks, and partnering with SOC, IT, and business teams to ensure ongoing compliance and control effectiveness. • Excellent written and verbal communication skills; demonstrated experience, communicating and collaborating effectively acr

Apply About employer

Report this job