Remote Senior GRC Lead: Information Security & Compliance

Great Gray Group.; Connecticut; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

Annual well-being stipend

401(k) employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to join our Information Security team in a remote US-based role. The role will lead IT governance, risk assessment, and security compliance, coordinating policies and ISMS across the organization, with support for enterprise risk management.

The ideal candidate has 5–10+ years in audit/compliance or technical security, strong communication skills, and relevant certifications.

Qualifications

• Bachelor's degree or higher in CS, Cybersecurity, IT, or related field.
• 5-10+ years of audit, compliance, or technical experience.
• Knowledge of IT security control trends and auditing/best practices.
• Strong written and verbal communication to explain IT controls to leaders.

Responsibilities

• Lead GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and industry standards.
• Prepare for and manage audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance.
• Develop and enforce information security policies and procedures.
• Perform vendor risk assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to embed security in processes.
• Mentor Information Security Analysts in GRC functions.
• Monitor security posture, identify threats, and recommend remediations.
• Conduct vulnerability assessments, pen tests, and security assessments.
• Participate in incident response and post-incident analysis.
• Stay current with security trends and emerging compliance requirements.

Skills

IT security controls

Auditing & compliance

Communication skills

Growth mindset

Disciplined curiosity

Grit

Results ownership

Collaboration

Entrepreneurial mindset

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Technology

Job description

Great Gray Group is seeking a Lead Information Security Analyst to join our Information Security team in a remote US-based role. The role will lead IT governance, risk assessment, and security compliance, coordinating policies and ISMS across the organization, with support for enterprise risk management.

The ideal candidate has 5–10+ years in audit/compliance or technical security, strong communication skills, and relevant certifications.