Remote Lead Information Security Analyst: GRC & Compliance

Great Gray Group.; Colorado; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

401(k) Plan

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk assessment, and security compliance across our US operations. You will drive GRC programs, audits, and policy development, while mentoring analysts and coordinating vendor risk reviews. Strong communication and knowledge of SOC 2, NIST CSF essential.

Remote from the United States; visa sponsorship not available. Requires 5–10+ years in audit/compliance or IT security.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field.
• 5–10+ years of audit, compliance, or technical experience.
• Experience with SOC 2, NIST CSF, and other security frameworks.
• Ability to communicate complex IT controls to leadership.
• Experience with ISMS, policies and procedures.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with relevant regulatory requirements and security frameworks (SOC 2, NIST, etc.).
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor Risk Management security assessments, onboarding, and reviews.
• Mentor and support the Information Security Analysts in both analyst and GRC functions.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications.
• Participate in incident response activities and conduct post-incident analysis.

Skills

IT security controls

Audit & compliance

Risk assessment

GRC management

Leadership

Communication

Policy documentation

Security frameworks

Regulatory knowledge

Education

Bachelor's degree in a related field

Job description

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk assessment, and security compliance across our US operations. You will drive GRC programs, audits, and policy development, while mentoring analysts and coordinating vendor risk reviews. Strong communication and knowledge of SOC 2, NIST CSF essential.

Remote from the United States; visa sponsorship not available. Requires 5–10+ years in audit/compliance or IT security.