Lead InfoSec & GRC Leader (Remote)

Great Gray Group.; Texas; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Group medical insurance

Dental insurance

Vision insurance

Employer-paid life and disability

Annual well-being stipend

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a senior Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance within the Information Security team. You will coordinate policies, documentation, and audits across SOC 2, NIST frameworks, and enterprise risk programs.

The role includes mentoring analysts, shaping security controls, and collaborating with cross-functional teams to embed security into processes.

Qualifications

• Bachelor's degree or higher in a relevant field.
• 5–10+ years of audit, compliance or technical experience.
• Strong knowledge of IT security control trends and auditing best practices.
• Effective written and verbal communication to explain IT controls to leadership.
• Certifications in auditing, compliance or IT security preferred.

Responsibilities

• Lead GRC functions including compliance monitoring, audits, and risk assessments.
• Ensure compliance with SOC 2, NIST, and other applicable standards.
• Prepare for and manage regulatory reviews and audits.
• Maintain security documentation and audit trails for compliance.
• Develop and enforce information security policies and procedures.
• Coordinate vendor risk assessments and reviews.
• Mentor junior analysts in GRC and security processes.
• Monitor security posture and recommend remediation.
• Conduct vulnerability assessments, pen testing, and security reviews.
• Participate in incident response and post-incident analysis.
• Stay current with security trends and evolving requirements.

Skills

GRC management

Auditing & compliance

Security governance

Regulatory frameworks

Threat & risk assessment

Education

Bachelor’s degree in Computer Science, Cybersecurity, IT

Job description

Great Gray Group is seeking a senior Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance within the Information Security team. You will coordinate policies, documentation, and audits across SOC 2, NIST frameworks, and enterprise risk programs.

The role includes mentoring analysts, shaping security controls, and collaborating with cross-functional teams to embed security into processes.