Remote Lead Information Security Analyst, GRC & SOC 2

Great Gray Group.; Maryland; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance across our organization in the United States. You will coordinate policies, controls, and audits to support the ISMS and frameworks such as SOC 2 and NIST CSF, while mentoring analysts.

This remote role is restricted to US residents where we are registered; visa sponsorship is not offered.

Qualifications

• Bachelor’s degree required in a field related to information security or IT.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing/best-practices.
• Strong written and verbal communication to convey complex IT controls to leadership.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST CSF, and other frameworks relevant to retirement services.
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Oversee Vendor Risk Management security assessments, onboarding, and reviews.
• Mentor Information Security Analysts in both analyst and GRC functions.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications.
• Participate in incident response activities and post-incident analysis.

Skills

GRC management

Audit management

Risk assessment

Regulatory compliance

Security policy

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field

Job description

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance across our organization in the United States. You will coordinate policies, controls, and audits to support the ISMS and frameworks such as SOC 2 and NIST CSF, while mentoring analysts.

This remote role is restricted to US residents where we are registered; visa sponsorship is not offered.