Remote Lead Information Security & GRC Analyst

Great Gray Group.; Virginia; Remote; USD 110.000 - 170.000; Vollzeit

Benefits dieser Stelle

Group medical, dental and vision

Employer-paid life and disability

401(k) with employer contribution

Zusammenfassung

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk assessment, and security compliance activities while supporting enterprise risk management and ISMS alignment with SOC 2 and the NIST CSF. The role is remote from the United States and requires authorization to work in the U.S.

without visa sponsorship. You will lead GRC functions, manage audits, mentor junior analysts, and maintain security documentation and policies across the organization.

Qualifikationen

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing practices.
• Effective written and verbal communication to leadership and partners.
• Relevant training or industry certifications in auditing, compliance, or IT security.

Aufgaben

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with regulatory requirements and security frameworks (SOC 2, NIST, industry standards).
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor Risk Management security assessments, onboarding, and reviews.
• Mentor and support Information Security Analysts in analyst and GRC functions.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications.
• Participate in incident response activities and conduct post-incident analysis.

Kenntnisse

GRC management

Risk assessment

Regulatory compliance

SOC 2

NIST CSF

Security policy

Vulnerability testing

Incident response

Communication skills

Ausbildung

Bachelor's degree

Tools

GRC software

Audit management tools

Policy management systems

Jobbeschreibung

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk assessment, and security compliance activities while supporting enterprise risk management and ISMS alignment with SOC 2 and the NIST CSF. The role is remote from the United States and requires authorization to work in the U.S.

without visa sponsorship. You will lead GRC functions, manage audits, mentor junior analysts, and maintain security documentation and policies across the organization.