Remote Lead Information Security Analyst - GRC & Compliance

Great Gray Group.; California City (CA); Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

401(k) plan with employer contribution

Job summary

Great Gray Group is hiring a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance initiatives within the organization. You will coordinate the review and implementation of ISMS policies and procedures, aligning with SOC 2 and NIST CSF frameworks.

The role involves audit management, evidence maintenance, and collaboration with stakeholders to ensure robust security controls. Remote-friendly in the United States, with visa sponsorship not available.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5–10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing/compliance best practices.
• Strong written and verbal communication to articulate IT controls to leadership.

Responsibilities

• Lead IT governance, risk assessment, and security compliance activities.
• Coordinate development and documentation of ISMS policies and procedures.
• Manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails.

Skills

GRC management

Compliance monitoring

Audit management

Risk assessment

Incident response

Vulnerability assessments

Penetration testing

Policy development

Security governance

Leadership mentoring

Effective communication

Education

Bachelor’s degree in Computer Science or related field

Tools

NIST CSF

SOC 2

Job description

Great Gray Group is hiring a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance initiatives within the organization. You will coordinate the review and implementation of ISMS policies and procedures, aligning with SOC 2 and NIST CSF frameworks.

The role involves audit management, evidence maintenance, and collaboration with stakeholders to ensure robust security controls. Remote-friendly in the United States, with visa sponsorship not available.