Remote Lead InfoSec & GRC Analyst – SOC 2/NIST Expert

Great Gray Group.; Clayton (NC); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

Annual well-being stipend

401(k) with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk assessment, and security compliance within our Information Security team. You will coordinate policies, ISMS documentation, and audits to ensure SOC 2 and NIST CSF alignment across the enterprise.

Remote in the US, with state restrictions where we are registered. Responsibilities span audits, policy development, vendor risk, and incident response, while mentoring junior analysts and maintaining security

Qualifications

• Bachelor’s degree in CS, cybersecurity, IT, or related field.
• 5–10+ years of audit, compliance, or technical experience.
• Strong knowledge of IT security controls, auditing and compliance.
• Effective written and verbal communication for leadership and partners.
• Certifications in auditing, compliance, or IT security are a plus.

Responsibilities

• Lead GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST CSF, and industry standards.
• Prepare for and manage audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails.
• Develop and enforce information security policies and procedures.
• Manage Vendor Risk assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to embed security in processes.
• Mentor Information Security Analysts in GRC functions.
• Monitor security posture, identify threats, and advise remediation.
• Conduct vulnerability assessments, penetration tests, and security reviews.
• Participate in incident response and post-incident analysis.
• Stay current with security trends and evolving compliance.

Skills

GRC management

SOC 2

NIST CSF

Auditing compliance

Policy development

Education

Bachelor's degree in Computer Science / Cybersecurity / IT

Job description

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk assessment, and security compliance within our Information Security team. You will coordinate policies, ISMS documentation, and audits to ensure SOC 2 and NIST CSF alignment across the enterprise.

Remote in the US, with state restrictions where we are registered. Responsibilities span audits, policy development, vendor risk, and incident response, while mentoring junior analysts and maintaining security