Lead Information Security & GRC Strategist (Remote)

Great Gray Group.; Michigan; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation

Group medical, dental and vision

Employer-paid life and disability

Annual well-being stipend

401(k) with employer match

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to lead governance, risk assessment, and security compliance activities. The role supports enterprise risk management and ISMS documentation and pipeline improvements.

You will coordinate policies, processes, and procedures, supervise analysts, and ensure alignment with SOC 2 and NIST CSF requirements in a remote U.S. environment with state restrictions where allowed. Competitive base pay and annual incentive plan accompany the role.

Qualifications

• Bachelor’s degree in CS, Cybersecurity, IT, or related field.
• 5–10+ years of audit, compliance, or technical experience.
• Strong knowledge of IT security controls and audit best practices.
• Excellent written and verbal communication with leadership.
• Certifications in auditing, compliance, or IT security.
• Ability to manage multiple priorities in a fast-paced environment.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with regulatory requirements and security frameworks (SOC 2, NIST, industry standards).
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor Risk Management security assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to integrate security and compliance into business processes.
• Mentor and support the Information Security Analysts in both analyst and GRC functions.
• Monitor security posture, identify threats, and recommend remediation measures.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications.
• Participate in incident response activities and conduct post-incident analysis.
• Stay current with security trends, vulnerabilities, and emerging compliance requirements

Skills

GRC leadership

Auditing & compliance

IT security controls

Communication

Policy development

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Technology

Tools

SOC 2

NIST CSF

Job description

Great Gray Group is seeking a Lead Information Security Analyst to lead governance, risk assessment, and security compliance activities. The role supports enterprise risk management and ISMS documentation and pipeline improvements.

You will coordinate policies, processes, and procedures, supervise analysts, and ensure alignment with SOC 2 and NIST CSF requirements in a remote U.S. environment with state restrictions where allowed. Competitive base pay and annual incentive plan accompany the role.