Remote Lead Information Security & GRC Analyst

Great Gray Group.; Alton (IL); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Life and disability insurance

Well-being stipend

401(k) plan

Job summary

Great Gray Group seeks a Lead Information Security Analyst to lead IT governance, risk management, and security compliance initiatives across SOC 2 and NIST frameworks. The role supports enterprise risk management and documents policies, processes, and ISMS practices.

Remote across eligible US states, with visa sponsorship not available. Join a collaborative, high-performance team focused on robust security, regulatory compliance, and cross-functional partnership.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 5–10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing & compliance best practices.
• Effective written and verbal communication to articulate IT controls to leadership.
• Certifications in auditing, compliance, or IT security are a plus.
• Ability to thrive in a fast-paced, dynamic environment with multiple priorities.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and other regulatory frameworks; support audits and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Oversee Vendor Risk Management assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to integrate security into business processes.
• Mentor Information Security Analysts in both analyst and GRC functions.
• Monitor security posture and recommend remediation measures.
• Stay current with security trends and emerging compliance requirements.

Skills

IT security controls

Auditing best practices

Communication with leadership

Risk assessment

GRC experience

Education

Bachelor’s degree in Computer Science / Cybersecurity / IT

Job description

Great Gray Group seeks a Lead Information Security Analyst to lead IT governance, risk management, and security compliance initiatives across SOC 2 and NIST frameworks. The role supports enterprise risk management and documents policies, processes, and ISMS practices.

Remote across eligible US states, with visa sponsorship not available. Join a collaborative, high-performance team focused on robust security, regulatory compliance, and cross-functional partnership.