Remote Lead Information Security & GRC (SOC 2/NIST)

Great Gray Group.; Tennessee; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance across the enterprise. The role centers on SOC 2 and the NIST Cybersecurity Framework, with emphasis on documenting policies, processes, and ISMS controls to ensure effective risk management and regulatory readiness.

You will mentor Information Security Analysts, coordinate audits and regulatory reviews, manage vendor risk assessments, perform vulnerability scans and

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5–10+ years of audit, compliance, or technical experience.
• Knowledge of IT security control trends and auditing best practices.
• Experience documenting and maintaining ISMS and security policies.
• Strong written and verbal communication for leadership and partners.

Responsibilities

• Lead GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST CSF, and industry standards.
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor risk management security assessments, onboarding, and reviews.
• Mentor and support Information Security Analysts in GRC and analyst work.
• Conduct vulnerability assessments, penetration testing, and security assessments.
• Participate in incident response activities and post-incident analysis.

Skills

GRC management

risk assessment

audits & compliance

SOC 2

NIST CSF

security policies

vendor risk

vulnerability testing

incident response

communication skills

IT security controls

Education

Bachelor’s degree in Computer Science/Cybersecurity/IT

Job description

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance across the enterprise. The role centers on SOC 2 and the NIST Cybersecurity Framework, with emphasis on documenting policies, processes, and ISMS controls to ensure effective risk management and regulatory readiness.

You will mentor Information Security Analysts, coordinate audits and regulatory reviews, manage vendor risk assessments, perform vulnerability scans and