Remote Lead Information Security & GRC (SOC 2/NIST)

Great Gray Group.; Lake Michigan Beach (MI); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Well-being stipend

401(k) plan

Medical insurance

Dental insurance

Life insurance

Disability insurance

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to head our GRC, risk assessment, and security compliance efforts. You will coordinate policies, processes, and ISMS activities while supporting enterprise risk management and regulatory alignment.

The role focuses on SOC 2 and NIST CSF compliance, audit readiness, and documentation. A strong leadership mindset, collaboration across teams, and mentoring of analysts are essential for success.

Qualifications

• 5–10+ years in audit, compliance, or technical roles.
• Strong knowledge of IT security controls and auditing best practices.
• Excellent written and verbal communication for leadership and partners.
• Certifications in auditing, compliance, or IT security are a plus.
• Thrives in a fast-paced, dynamic environment with multiple priorities.

Responsibilities

• Lead GRC functions, including compliance monitoring, audits, and risk assessments.
• Ensure regulatory and framework compliance (SOC 2, NIST, etc.).
• Prepare for and manage audits and regulatory reviews.
• Maintain security documentation and audit trails.
• Develop and enforce security policies and procedures.
• Oversee vendor risk assessments and reviews.
• Collaborate across teams to embed security into processes.
• Mentor Security Analysts in both analytics and GRC work.
• Monitor security posture, detect threats, and suggest remediations.
• Conduct vulnerability assessments, pen tests, and security reviews.
• Participate in incident response and post-incident analysis.
• Stay current with security trends and evolving requirements.

Skills

GRC leadership

Audit & compliance

IT security controls

Communication skills

Regulatory awareness

Ambiguity navigation

Mentoring

Education

Bachelor’s degree in CS/Cybersecurity/IT

Tools

SOC 2

NIST CSF

Policy development

Job description

Great Gray Group is seeking a Lead Information Security Analyst to head our GRC, risk assessment, and security compliance efforts. You will coordinate policies, processes, and ISMS activities while supporting enterprise risk management and regulatory alignment.

The role focuses on SOC 2 and NIST CSF compliance, audit readiness, and documentation. A strong leadership mindset, collaboration across teams, and mentoring of analysts are essential for success.