Remote Lead Information Security & GRC Analyst

Great Gray Group.; Columbus (OH); Remote; USD 120,000 - 160,000; Full time

Job summary

Great Gray Group in the United States is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance across the enterprise. You will coordinate ISMS documentation, policies, and procedures, mentor junior analysts, and manage vendor risk, audits, and vulnerability assessments.

This remote role requires 5–10+ years in audit or security, a related degree, and strong communication to leadership.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 5–10+ years of audit, compliance, or technical experience.
• Experience with SOC 2 and NIST Cybersecurity Framework.
• Excellent written and verbal communication to leadership.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with regulatory requirements and security frameworks (SOC 2, NIST, etc.).
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor Risk Management security assessments, onboarding, and reviews.

Skills

GRC management

Audit management

Risk assessment

SOC 2

NIST framework

IT security controls

Vendor risk management

Incident response

Communication skills

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field

Job description

Great Gray Group in the United States is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance across the enterprise. You will coordinate ISMS documentation, policies, and procedures, mentor junior analysts, and manage vendor risk, audits, and vulnerability assessments.

This remote role requires 5–10+ years in audit or security, a related degree, and strong communication to leadership.