Lead Information Security & GRC (Remote US)

Great Gray Group.; South Carolina; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

Well-being stipend

401(k) with employer contributions

Job summary

Great Gray Group seeks a Lead Information Security Analyst to spearhead IT governance, risk assessment, and security compliance across the organization. You will drive policies, controls, and audits aligned with SOC 2 and NIST frameworks, coordinating ISMS documentation and risk management activities.

The role collaborates with cross-functional teams to build secure, compliant processes and mentorJunior analysts in GRC functions.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing practices.
• Effective communication to articulate IT controls to leadership.
• Ability to thrive in a fast-paced environment and manage multiple priorities.

Responsibilities

• Lead GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and industry standards.
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation and audit trails for compliance.
• Develop, maintain, and enforce information security policies and procedures.
• Conduct Vendor Risk Management assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to embed security in processes.
• Mentor Information Security Analysts in both analyst and GRC roles.
• Monitor security posture, identify threats, and propose remediations.
• Conduct vulnerability assessments and penetration testing on systems.
• Participate in incident response and post-incident analysis.
• Stay current with security trends and evolving compliance requirements.

Skills

GRC management

Audit & compliance

Regulatory frameworks

Education

Bachelor's degree in CS/Cybersecurity/IT

Job description

Great Gray Group seeks a Lead Information Security Analyst to spearhead IT governance, risk assessment, and security compliance across the organization. You will drive policies, controls, and audits aligned with SOC 2 and NIST frameworks, coordinating ISMS documentation and risk management activities.

The role collaborates with cross-functional teams to build secure, compliant processes and mentorJunior analysts in GRC functions.