Senior GRC & Information Security Lead — Remote

Great Gray Group.; Elm (PA); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Group medical insurance

Life & disability insurance

401(k) plan

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to steer governance, risk assessment, and security compliance across our enterprise ISMS. You will coordinate policy development, documentation, and audits, aligning with SOC 2, NIST CSF, and industry standards. Remote work is available for eligible U.S. residents.

The role requires 5-10+ years in audit, compliance, or technical security, and strong communication skills to present complex IT controls to leadership and partners.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing & compliance best practices.
• Effective written and verbal communication to explain IT controls to leadership.

Responsibilities

• Lead IT governance, risk assessment, and security compliance activities.
• Coordinate review, development, implementation, and documentation of ISMS policies and procedures.
• Ensure compliance with SOC 2, NIST CSF, and other industry standards.
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance.

Skills

GRC management

SOC 2

NIST CSF

Audit & compliance

IT governance

Risk assessment

Security controls

Effective communication

Certifications

Mentoring

Education

Bachelor’s degree

Job description

Great Gray Group is seeking a Lead Information Security Analyst to steer governance, risk assessment, and security compliance across our enterprise ISMS. You will coordinate policy development, documentation, and audits, aligning with SOC 2, NIST CSF, and industry standards. Remote work is available for eligible U.S. residents.

The role requires 5-10+ years in audit, compliance, or technical security, and strong communication skills to present complex IT controls to leadership and partners.