Lead GRC & InfoSec Analyst - Remote

Great Gray Group.; Lorida (FL); Remoto; USD 120.000 - 150.000; Tempo pieno

Vantaggi offerti da questo lavoro

Compensation

Health insurance

Life insurance

Well-being stipend

401(k)

Descrizione del lavoro

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk management, and security compliance across our organization. This role coordinates SOC 2 and NIST controls, develops ISMS documentation, and mentors junior analysts.

Remote work is limited to states where we are registered in the US; successful candidates will partner with cross-functional teams to embed security into business processes and stay ahead of evolving regulatory requirements.

Competenze

• Bachelor’s degree in CS, Cybersecurity, IT, or related field.
• 5–10+ years of audit, compliance, or technical experience.
• Strong knowledge of IT security controls and auditing practices.
• Excellent written and verbal communication for leadership and partners.
• Certifications in auditing, compliance, or IT security are a plus.

Mansioni

• Lead IT governance, risk management, and security compliance activities.
• Coordinate SOC 2 and NIST-based controls and audits.
• Develop, implement, and maintain ISMS policies and procedures.
• Maintain security documentation, evidence, and audit trails.
• Mentor Information Security Analysts in GRC functions.
• Collaborate with cross-functional teams to embed security into processes.
• Monitor threats and recommend remediation measures.

Conoscenze

Audit & Compliance

IT Security

Risk assessment

Policy development

GRC tools

Regulatory knowledge

Communication skills

Incident response

Formazione

Bachelor’s degree in Computer Science or related field

Strumenti

GRC tools

Vulnerability assessment tools

Descrizione del lavoro

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk management, and security compliance across our organization. This role coordinates SOC 2 and NIST controls, develops ISMS documentation, and mentors junior analysts.

Remote work is limited to states where we are registered in the US; successful candidates will partner with cross-functional teams to embed security into business processes and stay ahead of evolving regulatory requirements.