Lead Information Security & GRC Specialist (SOC 2/NIST)

Great Gray Group.; United States; Teletrabalho; USD 140 000 - 180 000; Tempo integral

Resumo da oferta

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk, and security compliance across the enterprise. You will coordinate SOC 2 and NIST CSF programs and help build a robust ISMS.

You will develop and enforce security policies, mentor analysts, and partner with teams to embed security into business processes. This is a remote role with eligibility restricted to states where we are registered.

Qualificações

• Experience leading GRC functions including compliance monitoring.
• Familiarity with SOC 2 and NIST Cybersecurity Framework.
• Ability to develop and maintain information security policies.

Responsabilidades

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and industry standards.
• Prepare for and manage audits, assessments, and regulatory reviews.
• Maintain security documentation and audit trails for compliance.
• Develop and enforce information security policies and procedures.
• Manage vendor risk assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to integrate security into processes.
• Mentor Information Security Analysts in GRC functions.
• Monitor security posture, identify threats, and recommend remediation.

Conhecimentos

GRC

Risk assessment

Regulatory compliance

Policy development

Security governance

Descrição da oferta de emprego

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk, and security compliance across the enterprise. You will coordinate SOC 2 and NIST CSF programs and help build a robust ISMS.

You will develop and enforce security policies, mentor analysts, and partner with teams to embed security into business processes. This is a remote role with eligibility restricted to states where we are registered.