Remote Lead: Information Security & GRC (SOC 2/NIST)

Great Gray Group.; New Hampshire; Teletrabalho; USD 120 000 - 150 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Group medical, dental and vision

Employer-paid life and disability

Annual well-being stipend

401(k) with employer contribution

Resumo da oferta

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk assessment, and security compliance activities within Enterprise Information Security. The role supports risk management and compliance with SOC 2 and NIST frameworks, developing and documenting ISMS policies and procedures.

The position is remote across the United States, with state eligibility restrictions. You will mentor junior analysts and collaborate across functions to embed security into business

Qualificações

• Bachelor’s degree in CS/IT/Cybersecurity.
• 5–10+ years in audit, compliance, or technical roles.
• Knowledge of IT security controls and auditing best practices.
• Excellent written and verbal communication for leadership.

Responsabilidades

• Lead GRC functions including compliance monitoring and risk assessment.
• Ensure compliance with SOC 2, NIST, and other standards.
• Prepare for audits, assessments, and regulatory reviews.
• Maintain security documentation and audit trails.
• Develop and enforce information security policies.
• Vendor risk management assessments and reviews.
• Mentor Information Security Analysts and coordinate with teams.
• Monitor security posture and recommend remediation measures.
• Conduct vulnerability assessments and penetration tests.
• Participate in incident response and post-incident analysis.

Conhecimentos

GRC leadership

Audit & compliance

SOC 2 knowledge

NIST knowledge

IT security controls

Formação académica

Bachelor’s degree in Computer Science, Cybersecurity, or IT

Descrição da oferta de emprego

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk assessment, and security compliance activities within Enterprise Information Security. The role supports risk management and compliance with SOC 2 and NIST frameworks, developing and documenting ISMS policies and procedures.

The position is remote across the United States, with state eligibility restrictions. You will mentor junior analysts and collaborate across functions to embed security into business