Lead Information Security & GRC Strategist (Remote)

Great Gray Group.; Milton (MA); Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health, dental and vision insurance

Employer-paid life and disability保险

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance initiatives. This role supports enterprise risk management and ISMS documentation, with oversight of policies and procedures to meet SOC 2 and NIST frameworks.

The position is remote within the United States, with eligibility limited to states where Great Gray is registered. Visa sponsorship is not offered.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5–10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security controls and auditing & compliance best practices.
• Effective written and verbal communication to articulate IT controls to leadership and partners.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST and other security frameworks and industry standards.
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor risk management security assessments, onboarding, and reviews.
• Mentor and support Information Security Analysts in GRC functions.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications.
• Participate in incident response activities and post-incident analysis.

Skills

GRC management

Risk assessment

Security compliance

Auditing & compliance

Vendor risk management

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Technology

Job description

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance initiatives. This role supports enterprise risk management and ISMS documentation, with oversight of policies and procedures to meet SOC 2 and NIST frameworks.

The position is remote within the United States, with eligibility limited to states where Great Gray is registered. Visa sponsorship is not offered.