Remote Lead Information Security & GRC Analyst

Great Gray Group.; Sacramento (CA); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation package

Medical, dental and vision insurance

Employer-paid life and disability

Annual well-being stipend

401(k) with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to guide IT governance, risk assessment, and security compliance across the ISMS. You will coordinate policies, processes, and controls to align with SOC 2 and the NIST Cybersecurity Framework, while mentoring others and driving security program maturity.

The role focuses on risk management, policy development, and collaboration with cross-functional teams to embed security into business processes and maintain audit readiness.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing/best practices.
• Effective written and verbal communication to articulate IT controls to leadership.
• Ability to thrive in a fast-paced environment and manage multiple priorities.
• Relevant training and/or industry certifications in auditing, compliance, or IT security.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with regulatory requirements and security frameworks (SOC 2, NIST, etc.).
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor risk management security assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to integrate security and compliance into business processes.
• Mentor and support the Information Security Analysts in both analyst and GRC functions.
• Monitor security posture, identify threats, and recommend remediation measures.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications.
• Participate in incident response activities and conduct post-incident analysis.
• Stay current with security trends and emerging compliance requirements.

Skills

Audit experience

Compliance

IT security controls

Communication

SOC 2 & NIST

Leadership

Education

Bachelor’s degree in CS/Cybersecurity/IT

Job description

Great Gray Group is seeking a Lead Information Security Analyst to guide IT governance, risk assessment, and security compliance across the ISMS. You will coordinate policies, processes, and controls to align with SOC 2 and the NIST Cybersecurity Framework, while mentoring others and driving security program maturity.

The role focuses on risk management, policy development, and collaboration with cross-functional teams to embed security into business processes and maintain audit readiness.