Remote Lead Information Security & GRC Analyst

Great Gray Group.; Pennsylvania; Teletrabalho; USD 120 000 - 170 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Group medical insurance

Employer-paid life and disability保险

401(k) plan with employer contribution

Resumo da oferta

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk, and compliance efforts in the US. You will drive SOC 2 and NIST CSF programs, develop security policies, and coordinate audits while supporting enterprise risk management across the organization.

The role is remote from the United States, with state-level employment registrations applied. Applicants must be authorized to work in the US without visa sponsorship.

Qualificações

• Requires bachelor’s degree in a related field and 5–10+ years of audit, compliance, or technical experience.
• Strong knowledge of IT security controls, auditing, and compliance best practices.
• Excellent written and verbal communication to articulate IT controls to leadership.

Responsabilidades

• Lead and manage GRC functions including compliance monitoring, audits, and risk assessments.
• Ensure compliance with SOC 2, NIST CSF, and other standards and industry requirements.
• Prepare for and manage audits, assessments, and regulatory reviews; maintain evidence trails.
• Develop, maintain, and enforce information security policies and procedures.
• Mentor Information Security Analysts in GRC and technical areas.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and apps.
• Participate in incident response and post-incident analysis.

Conhecimentos

GRC

Security governance

SOC 2

NIST CSF

Audit management

Risk assessment

Regulatory compliance

Communication

Formação académica

Bachelor’s degree in Computer Science / Cybersecurity / IT

Descrição da oferta de emprego

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk, and compliance efforts in the US. You will drive SOC 2 and NIST CSF programs, develop security policies, and coordinate audits while supporting enterprise risk management across the organization.

The role is remote from the United States, with state-level employment registrations applied. Applicants must be authorized to work in the US without visa sponsorship.