Lead Information Security Analyst

Great Gray Group.; United States; Sur place; USD 140 000 - 180 000; Plein temps

Résumé du poste

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk, and security compliance across the enterprise. You will coordinate SOC 2 and NIST CSF programs and help build a robust ISMS.

You will develop and enforce security policies, mentor analysts, and partner with teams to embed security into business processes. This is a remote role with eligibility restricted to states where we are registered.

Qualifications

• Experience leading GRC functions including compliance monitoring.
• Familiarity with SOC 2 and NIST Cybersecurity Framework.
• Ability to develop and maintain information security policies.

Responsabilités

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and industry standards.
• Prepare for and manage audits, assessments, and regulatory reviews.
• Maintain security documentation and audit trails for compliance.
• Develop and enforce information security policies and procedures.
• Manage vendor risk assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to integrate security into processes.
• Mentor Information Security Analysts in GRC functions.
• Monitor security posture, identify threats, and recommend remediation.

Connaissances

GRC

Risk assessment

Regulatory compliance

Policy development

Security governance

Description du poste

Why Great Gray?

At Great Gray Group, we strive to set the bar for the retirement services industry. Our goal is to deliver advanced retirement solutions that combine our core fiduciary services with robust investment options, innovative technology, and dedicated client service. We focus on making choices clearer, transitions smoother, and the client experience more delightful. Complacency isn't in our vocabulary. Every day, we look for opportunities to better serve our clients, be an excellent business partner, and earn the trust of those who rely on us.

The Role

Great Gray is seeking a Lead Information Security Analyst to join our Information Security team. This role will lead IT governance, risk assessment, and security compliance activities while supporting enterprise risk management and compliance with regulations and frameworks such as SOC 2 and the NIST Cybersecurity Framework. The analyst will also coordinate the review, development, implementation, and documentation of policies, processes, procedures, and practices that support the information security management system (ISMS).

Location

This position work remote from the United States. Please note that remote employment in this role is restricted to candidates residing in states where Great Gray is currently registered as an employer. These states are limited to: CA, CO, CT, DC, DE, FL, GA, IL, IN, MA, MD, MI, MN, NC, NH, NJ, NV, NY, OH, PA, RI, SC, TN, TX and VA.

Visa sponsorship or transfer of an existing visa is not available for this position. Applicants must be authorized to work directly for any employer in the United States without visa sponsorship or transfer.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with relevant regulatory requirements and security frameworks (SOC 2, NIST, industry-specific standards, etc.)
• Prepare for and manage compliance audits, assessments, and regulatory reviews
• Maintain security documentation, evidence, and audit trails for compliance purposes
• Develop, maintain, and enforce information security policies and procedures
• Vendor Risk Management security assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to integrate security and compliance into business processes
• Mentor and support the Information Security Analysts in both analyst and GRC functions
• Monitor security posture, identify threats, and recommend remediation measures