Remote Lead Information Security & GRC Champion

Great Gray Group.; Minneota (MN); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, vision

Employer-paid life & disability

Annual well-being stipend

401(k) with employer match

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to join our Information Security team. This role will lead IT governance, risk assessment, and security compliance activities across SOC 2 and the NIST Cybersecurity Framework, while supporting enterprise risk management and ISMS policy development.

The position is remote from the United States, with state restrictions on where we can employ candidates.

Qualifications

• Bachelor’s degree required and 5–10+ years in audit or compliance.
• Strong knowledge of SOC 2 and NIST Cybersecurity Framework.
• Experience documenting and auditing ISMS and security policies.
• Excellent written and verbal communication to leadership.

Responsibilities

• Lead GRC functions including compliance monitoring and risk assessment.
• Coordinate audits, assessments, and regulatory reviews.
• Develop and enforce information security policies and procedures.
• Collaborate with cross-functional teams to integrate security into business processes.
• Mentor Information Security Analysts in GRC tasks.

Skills

Audit and compliance knowledge

IT security controls

Effective communication

Leadership and mentoring

Ambiguity tolerance

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field

Job description

Great Gray Group is seeking a Lead Information Security Analyst to join our Information Security team. This role will lead IT governance, risk assessment, and security compliance activities across SOC 2 and the NIST Cybersecurity Framework, while supporting enterprise risk management and ISMS policy development.

The position is remote from the United States, with state restrictions on where we can employ candidates.