Security and Compliance Analyst

Fredrikson & Byron
life insurance, parental leave, 401(k), retirement plan
United States, Minnesota, Minneapolis
200 South 6th Street (Show on map)
Dec 30, 2025
Who We Are: Fredrikson is the premier Midwest-based law firm working collaboratively to help businesses achieve their goals regionally, nationally, and globally. Overview: Fredrikson is seeking a Security and Compliance Analyst to serve as a key member of the Firm's IT Security team. This role supports and advances the Firm's security governance, compliance, and third-party risk management programs, while helping protect the confidentiality, integrity, and availability of Firm data and information assets. The Security and Compliance Analyst manages administrative and technical components of the Firm's Security Program, supports ISO 27001 certification efforts, maintains core Microsoft 365 and Entra ID security platforms, oversees vulnerability management processes, and participates in incident response activities. This position works closely with IT Infrastructure, Firm leadership, and business stakeholders to ensure security practices align with Firm policies, industry standards, and business objectives. Key Responsibilities Include: * Support and maintain the Firm's ISO 27001 certification and overall security governance framework. * Manage compliance with Firm security policies, procedures, and best practices; identify gaps and escalate non-compliance as appropriate. * Administer and maintain Microsoft 365 and Entra ID security platforms, including Secure Score, Compliance, and Data Governance admin centers. * Develop, mature, and maintain the Firm's Data Loss Prevention (DLP) program. * Develop and manage the Firm's Third-Party Risk Management program, including vendor risk assessments and client security questionnaires. * Manage the vulnerability scanning program; analyze results, recommend remediation actions, and advise on patching and lifecycle management. * Partner with the Infrastructure Team to design, implement, and improve security controls, patch deployment, and system upgrade processes. * Participate in the Firm's Incident Response Team, including evaluation of security events, incident management, and required documentation. * Monitor security alerts, logs, network traffic, and threat intelligence to identify and mitigate risks; respond to escalations as needed. * Evaluate security controls of new systems, applications, vendors, and services prior to purchase or contract execution. * Participate in internal audits, security assessments, and internal/external penetration testing. * Collaborate with Firm leadership and IT teams to align security initiatives with business goals. * Provide project support, mentorship, and operational assistance within the IT department, including participation in on-call rotation and maintenance windows. Required Qualifications * 5+ years of relevant experience in information security, compliance, risk management, or related IT roles. * Experience supporting security compliance frameworks (e.g., ISO 27001 or similar). * Experience with vulnerability management, security monitoring, and incident response. * Familiarity with Microsoft 365 security tools and Entra ID. * Strong analytical, organizational, and problem-solving skills. * Excellent written and verbal communication skills, including the ability to communicate technical concepts to non-technical audiences. * Ability to work with discretion on confidential and sensitive matters. * Candidates must live in the state of Minnesota Desired Qualifications * Experience in a professional services or law firm environment. * Familiarity with third-party risk management programs and vendor assessments. * Experience with tools such as Rapid7, OpenDNS, firewalls, and similar security technologies. * Relevant certifications (e.g., CISSP, CISM, CISA, or similar) preferred. * Collaborative, detail-oriented team player with strong initiative and follow-through. Benefits: Our comprehensive benefits options include medical, dental, vision, basic and supplemental life insurance, short- and long-term disability, employee resource benefits (inclusive of counseling, coaching, and caregiving guidance), paid parental leave, parenting classes, pre-tax parking and transportation options, and much more! Our retirement plan includes financial planning, Social Security/Medicare planning, 401k/Roth investment options, and a firm-paid profit-sharing contribution. Benefits are subject to eligibility requirements and other terms and conditions. Compensation: The salary range for this position varies by geographical market. In Minneapolis, the estimated starting annual pay range is $90,000 - $110,000/year. The compensation offered will be dependent on the candidate's experience, skills, education, professional background, overall qualifications, and geographic market location. Applying For This Position: Interested candidates should submit their resume and cover letter. Applications will only be accepted online at https://www.fredlaw.com/careers-meet-us. For assistance with the application process or for accommodations, please contact recruiting@fredlaw.com. About Fredrikson: With a reputation as the firm "where law and business meet," our attorneys and staff bring business acumen and entrepreneurial thinking to operate as business advisors, strategic partners, and legal counselors to our clients. To best serve our clients, we provide innovative solutions to legal needs while reflecting inclusion and diversity as core values. We offer highly competitive salaries and comprehensive benefits in a collaborative work environment. The firm's 400+ attorneys serve clients through our ten locations around the world: Minneapolis, Saint Paul, and Mankato, MN; Bismarck and Fargo, ND; Ames and Des Moines, IA; Madison, WI; Saltillo, Mexico; and Shanghai, China. Fredrikson is an equal employment opportunity employer. All qualified applicants are encouraged to apply. Fredrikson does not discriminate in its recruiting, hiring or employment practices on the basis of race, color, religion, creed, age, sex, pregnancy, childbirth, or related medical conditions, national origin, ancestry, marital status, familial status, disability, sexual orientation, gender identity or expression, military or veteran status, genetic information, status with regard to public assistance, and any other characteristics protected by applicable local, state, and/or federal laws. We are not accepting search firm submissions for this position; please apply directly through our careers page.