Remote Information Security & GRC Lead (SOC 2/NIST)

Great Gray Group.; Indiana; Remote; USD 110,000 - 180,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

401(k) with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance initiatives across the enterprise. You will lead GRC activities, coordinate audits, and ensure alignment with SOC 2 and NIST CSF, while developing policies and managing vendor risk.

The role is remote from the United States, requiring eligibility to work without sponsorship in the U.S. and residence in states where the company is registered.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5–10+ years of audit, compliance, or technical experience.
• Strong knowledge of IT security control trends and auditing/compliance best practices.
• Excellent written and verbal communication to articulate IT controls to leadership.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with regulatory requirements and security frameworks (SOC 2, NIST, etc.)
• Prepare for and manage compliance audits, assessments, and regulatory reviews
• Maintain security documentation, evidence, and audit trails for compliance purposes
• Develop, maintain, and enforce information security policies and procedures
• Vendor Risk Management security assessments, onboarding, and reviews.
• Mentor and support Information Security Analysts in GRC functions
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications
• Participate in incident response activities and conduct post-incident analysis

Skills

Communication skills

Attention to detail

Adaptability

Mentoring

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Technology

Tools

SOC 2

NIST CSF

Job description

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance initiatives across the enterprise. You will lead GRC activities, coordinate audits, and ensure alignment with SOC 2 and NIST CSF, while developing policies and managing vendor risk.

The role is remote from the United States, requiring eligibility to work without sponsorship in the U.S. and residence in states where the company is registered.