Remote Lead Information Security & GRC Analyst

Great Gray Group.; Yorktown (VA); Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance across the enterprise. The role focuses on SOC 2 and NIST CSF, policy development, and ISMS documentation to strengthen our security posture.

Work is remote within the United States, with eligibility restricted to states where the company is registered. Candidates should have 5-10+ years of audit/compliance experience and strong communication skills to lead

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends as well as auditing & compliance best practices.
• Effective communication skills (written and verbal) to properly articulate complicated IT controls and compliance issues to leadership and partners.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with relevant regulatory requirements and security frameworks (SOC 2, NIST, industry-specific standards, etc.)
• Prepare for and manage compliance audits, assessments, and regulatory reviews
• Maintain security documentation, evidence, and audit trails for compliance purposes
• Develop, maintain, and enforce information security policies and procedures
• Vendor Risk Management security assessments, onboarding, and reviews.
• Mentor and support the Information Security Analysts in both analyst and GRC functions
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications
• Participate in incident response activities and conduct post-incident analysis

Skills

GRC leadership

Compliance monitoring

Audit management

Risk assessment

SOC 2

NIST CSF

Policy development

Incident response

Vulnerability assessment

Penetration testing

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field

Job description

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance across the enterprise. The role focuses on SOC 2 and NIST CSF, policy development, and ISMS documentation to strengthen our security posture.

Work is remote within the United States, with eligibility restricted to states where the company is registered. Candidates should have 5-10+ years of audit/compliance experience and strong communication skills to lead