Remote Lead InfoSec & GRC Compliance Leader

Great Gray Group.; Tennessee; Remote; USD 110,000 - 170,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

401(k) with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance across the enterprise. You will coordinate policies, processes, and ISMS documentation to align with SOC 2 and NIST frameworks.

The role is remote from the United States, with restrictions to states where Great Gray is registered; visa sponsorship is not available. Strong communication and leadership skills are essential.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security controls and auditing best practices.
• Effective written and verbal communication skills to leadership and partners.
• Industry certifications in auditing, compliance, or IT security.
• Ability to work remotely from the United States and comply with state registration.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and industry-specific standards.
• Prepare for and manage audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor risk assessment, onboarding, and reviews.
• Mentor and support Information Security Analysts in GRC functions.
• Conduct vulnerability assessments, penetration testing, and security assessments.
• Participate in incident response activities and post-incident analysis.

Skills

GRC leadership

Auditing & compliance

Security risk assessment

Vendor risk management

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology

Job description

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance across the enterprise. You will coordinate policies, processes, and ISMS documentation to align with SOC 2 and NIST frameworks.

The role is remote from the United States, with restrictions to states where Great Gray is registered; visa sponsorship is not available. Strong communication and leadership skills are essential.