Remote Lead Information Security & GRC

Great Gray Group.; Central City (CO); Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Group medical, dental and vision保险

Employer-paid life and disability保险

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to govern IT risk, compliance, and governance programs. You will coordinate policy development, risk assessments, and security controls across the organization while aligning with SOC 2 and NIST frameworks, ensuring robust ISMS documentation and audit readiness.

This remote role requires working from the United States and compliance with state employment registrations.

Qualifications

• 5-10+ years of audit, compliance, or technical experience.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field.
• Excellent knowledge of IT security control trends and auditing best practices.
• Effective written and verbal communication to explain IT controls to leadership.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and other security frameworks.
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance.

Skills

GRC

Audit & Compliance

IT Security Knowledge

Communication Skills

Certifications

Education

Bachelors in CS/Cybersecurity/IT

Job description

Great Gray Group is seeking a Lead Information Security Analyst to govern IT risk, compliance, and governance programs. You will coordinate policy development, risk assessments, and security controls across the organization while aligning with SOC 2 and NIST frameworks, ensuring robust ISMS documentation and audit readiness.

This remote role requires working from the United States and compliance with state employment registrations.