Remote InfoSec & GRC Lead — SOC 2/NIST Expert

Great Gray Group.; Illinois; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Growth opportunities

Competitive compensation package

Group medical, dental and vision

Employer-paid life and disability

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk management, and security compliance activities within the Information Security team. This role coordinates policy development and documentation to support the ISMS, SOC 2, and NIST frameworks.

The role requires deep expertise in audits, compliance, and IT security controls, plus the ability to mentor analysts and work with cross-functional partners across the enterprise.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing & compliance best practices.
• Strong written and verbal communication to articulate IT controls to leadership.
• Positive attitude and commitment to quality work.
• Relevant training or industry certifications in auditing, compliance, or IT security.
• Ability to thrive in a fast-paced environment and manage multiple priorities.
• Comfortable navigating ambiguity.
• Entrepreneurial mindset to bring best practices to the team.
• Core values: Growth Mindset, Disciplined Curiosity, Grit, Results Ownership, Collaboration.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with regulatory requirements and security frameworks (SOC 2, NIST, etc.).
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor risk management security assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to integrate security into business processes.
• Mentor and support the Information Security Analysts in GRC functions.
• Monitor security posture, identify threats, and recommend remediation.
• Conduct vulnerability assessments, penetration testing, and security assessments.
• Participate in incident response activities and post-incident analysis.
• Stay current with security trends and emerging requirements.

Skills

GRC knowledge

Auditing & compliance

IT security controls

Communication skills

Problem solving

Education

Bachelor's degree

Job description

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk management, and security compliance activities within the Information Security team. This role coordinates policy development and documentation to support the ISMS, SOC 2, and NIST frameworks.

The role requires deep expertise in audits, compliance, and IT security controls, plus the ability to mentor analysts and work with cross-functional partners across the enterprise.