Remote Lead Information Security & GRC Analyst

Great Gray Group.; Maryland City (MD); Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to oversee IT governance, risk management, and security compliance across the enterprise. You will coordinate policy development, documentation, and ISMS activities to support robust information security management.

The role involves vulnerability assessments, penetration testing, incident response, and mentor/sharing expertise with junior analysts.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security controls and auditing best practices.

Responsibilities

• Lead IT governance, risk assessment, and security compliance activities.
• Coordinate review, development, implementation, and documentation of ISMS policies and procedures.
• Maintain security documentation, evidence, and audit trails for compliance.
• Develop, maintain, and enforce information security policies and procedures.
• Conduct vulnerability assessments, penetration testing, and security assessments.
• Participate in incident response activities and post-incident analysis.

Skills

GRC

Audit

SOC 2

NIST

Information security

Vendor risk management

Incident response

Penetration testing

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Technology

Job description

Great Gray Group is seeking a Lead Information Security Analyst to oversee IT governance, risk management, and security compliance across the enterprise. You will coordinate policy development, documentation, and ISMS activities to support robust information security management.

The role involves vulnerability assessments, penetration testing, incident response, and mentor/sharing expertise with junior analysts.