Remote Lead Information Security Analyst - GRC & SOC 2

Great Gray Group.; Clifton (TX); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

Life and disability insurance

Well-being stipend

401(k) plan

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to join our Information Security team. This role leads IT governance, risk assessment, and security compliance activities while supporting enterprise risk management and ISMS documentation.

The ideal candidate will coordinate audits, develop policies, and mentor analysts to ensure ongoing security posture and regulatory alignment across SOC 2 and NIST frameworks. Remote work is allowed for qualified US residents.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5-10+ years of audit, compliance, or technical experience.
• Strong knowledge of IT security control trends and auditing/compliance best practices.
• Effective written and verbal communication for leadership and partners.
• Positive attitude and commitment to quality work.
• Relevant training or industry certifications in auditing, compliance, or IT security.
• Ability to thrive in a fast-paced environment and manage multiple priorities.
• Comfort navigating ambiguity and bringing best practices to the team.
• Core values: Growth Mindset, Disciplined Curiosity, Grit, Results Ownership, Collaboration.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with regulatory requirements and security frameworks (SOC 2, NIST, etc.).
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor risk management security assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to integrate security and compliance into business processes.
• Mentor and support Information Security Analysts in both analyst and GRC functions.
• Monitor security posture, identify threats, and recommend remediation.
• Conduct vulnerability assessments, penetration testing, and security assessments.
• Participate in incident response activities and post-incident analysis.
• Stay current with security trends, vulnerabilities, and emerging requirements.

Skills

GRC management

Risk assessment

Regulatory compliance

SOC 2

NIST CSF

Security governance

Policy development

Education

Bachelor’s degree in CS/Cybersecurity/IT

Tools

Audit management

ISMS documentation

Job description

Great Gray Group is seeking a Lead Information Security Analyst to join our Information Security team. This role leads IT governance, risk assessment, and security compliance activities while supporting enterprise risk management and ISMS documentation.

The ideal candidate will coordinate audits, develop policies, and mentor analysts to ensure ongoing security posture and regulatory alignment across SOC 2 and NIST frameworks. Remote work is allowed for qualified US residents.