Remote Lead Information Security Analyst – GRC & SOC 2/NIST

Great Gray Group.; Orangeburg (SC); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation package

Group medical, dental and vision

Employer-paid life and disability

Annual well-being stipend

401(k) with employer contributions

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to join our Information Security team. This role will lead IT governance, risk assessment, and security compliance activities while supporting enterprise risk management and compliance with SOC 2 and the NIST Cybersecurity Framework.

The analyst will also coordinate the review, development, implementation, and documentation of policies, processes, procedures, and practices that support the information security management system

Qualifications

• Bachelor’s degree in CS/IT/cybersecurity or related field.
• 5–10+ years of audit, compliance, or technical experience.
• Knowledge of IT security control trends and auditing best practices.
• Strong written and verbal communication to explain IT controls to leadership.
• Willingness to thrive in a fast-paced environment and handle multiple priorities.
• Industry certifications in auditing, compliance, or IT security.

Responsibilities

• Lead GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and other standards.
• Prepare for and manage compliance audits and regulatory reviews.
• Maintain security documentation and audit trails for compliance.
• Develop and enforce information security policies and procedures.
• Conduct vendor risk assessments and reviews.
• Collaborate with cross-functional teams to embed security into processes.
• Mentor Information Security Analysts in both analyst and GRC roles.
• Monitor security posture and recommend remediation measures.
• Conduct vulnerability assessments, penetration testing, and security reviews.
• Participate in incident response and post-incident analysis.
• Stay updated on security trends and evolving compliance requirements.

Skills

GRC & InfoSec

Audit & Compliance

Communication skills

Leadership

Education

Bachelor’s degree in Computer Science or Information Technology or Cybersecurity

Job description

Great Gray Group is seeking a Lead Information Security Analyst to join our Information Security team. This role will lead IT governance, risk assessment, and security compliance activities while supporting enterprise risk management and compliance with SOC 2 and the NIST Cybersecurity Framework.

The analyst will also coordinate the review, development, implementation, and documentation of policies, processes, procedures, and practices that support the information security management system