Lead InfoSec & GRC Analyst (Remote, SOC 2/NIST)

Great Gray Group.; Butlerville (IN); Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk assessment, and security compliance. This role will drive enterprise risk management and ensure adherence to SOC 2 and NIST CSF, while developing, implementing, and documenting ISMS policies and procedures.

The position is remote from the United States, with eligibility limited to states where the employer is registered. Visa sponsorship is not available.

Qualifications

• Lead and manage IT governance, risk assessment, and security compliance activities.
• Support enterprise risk management and compliance with SOC 2 and NIST CSF.
• Maintain ISMS policies, processes, and documentation.

Responsibilities

• Lead GRC functions including compliance monitoring and audits.
• Ensure regulatory and framework compliance (SOC 2, NIST).
• Prepare for and manage audits and regulatory reviews.
• Maintain security documentation and audit trails.
• Develop and enforce information security policies and procedures.
• Conduct vendor risk assessments and reviews.
• Mentor Information Security Analysts in GRC and analyst work.
• Conduct vulnerability assessments and security testing.
• Participate in incident response and post-incident analysis.

Skills

IT governance

Risk assessment

Security compliance

GRC leadership

Auditing

Education

Bachelor’s degree in CS/Cybersecurity/IT

Job description

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk assessment, and security compliance. This role will drive enterprise risk management and ensure adherence to SOC 2 and NIST CSF, while developing, implementing, and documenting ISMS policies and procedures.

The position is remote from the United States, with eligibility limited to states where the employer is registered. Visa sponsorship is not available.