Remote Senior InfoSec & GRC Lead (SOC 2/NIST)

Great Gray Group.; Nevada; Teletrabalho; USD 120 000 - 180 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Group medical, dental and vision

Employer-paid life and disability

401(k) plan with employer contribution

Resumo da oferta

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk assessment, and security compliance efforts across SOC 2 and NIST frameworks. This role supports enterprise risk management and IT security within an ISMS.

The position is remote from the United States, with state-based eligibility requirements and no visa sponsorship. You will mentor analysts, conduct vulnerability testing, audits, and regulatory reviews while collaborating with leadership to strengthen

Qualificações

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 5–10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing & compliance best practices.
• Effective written and verbal communication to explain IT controls to leadership.

Responsabilidades

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and industry standards.
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor risk management security assessments, onboarding, and reviews.
• Mentor and support Information Security Analysts in both analyst and GRC functions.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications.
• Participate in incident response activities and conduct post-incident analysis.

Conhecimentos

GRC management

Regulatory compliance

Audit coordination

Incident response

Security policy development

Vendor risk management

Security testing

Communication skills

Formação académica

Bachelor's degree in CS/Cybersecurity/IT

Descrição da oferta de emprego

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk assessment, and security compliance efforts across SOC 2 and NIST frameworks. This role supports enterprise risk management and IT security within an ISMS.

The position is remote from the United States, with state-based eligibility requirements and no visa sponsorship. You will mentor analysts, conduct vulnerability testing, audits, and regulatory reviews while collaborating with leadership to strengthen