Senior Information Security Analyst

Sky Water is partnering with aglobal professional services firm adding its first dedicated GRC hire to a small, hands-on information security team. You will report to the security manager who owns GRC today, and you will take over a large share of the day-to-day: client security assessments, contract security reviews, and the annual ISO 27001 surveillance audit. The firm's clients ask more of security every year, and this role exists so the work keeps pace.

You will work in a Microsoft cloud environment and help on an identity and access cleanup, a data loss prevention rollout, and early AI governance work.

Non-negotiables: you have owned an ISMS audit cycle from scoping through remediation, you have done it inside a single organization for several years, and you can work independently without much oversight.

Why it is worth a look: a small team, real ownership, a visible AI governance roadmap, and a remote-friendly setup with an optional Twin Cities desk. Base is $100,000 to $130,000