Senior GRC & Security Lead - SOC 2/NIST (Remote)

Great Gray Group.; Florida; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation package

Medical, dental and vision insurance

Employer-paid life and disability ins.

Annual well-being stipend

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to drive governance, risk management, and security compliance across the organization. You will coordinate audit readiness, policy development, and cross-functional security initiatives within the Information Security team.

The role emphasizes collaboration, threat monitoring, and continuous improvement of the ISMS, with a remote-first arrangement for eligible U.S. states and a base pay range aligned to market standards.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field.
• 5–10+ years of audit, compliance, or technical experience.
• Strong knowledge of IT security controls and audit practices.
• Excellent written and verbal communication to convey controls to leadership.
• Certifications in auditing, compliance, or IT security.
• Ability to thrive in a fast-paced environment with multiple priorities.
• Entrepreneurial mindset aligned with company values.
• Growth Mindset, Disciplined Curiosity, Grit, Results Ownership, Collaboration.

Responsibilities

• Lead and manage GRC functions including compliance monitoring and risk assessment.
• Ensure compliance with SOC 2, NIST, and industry standards.
• Prepare for audits and regulatory reviews.
• Maintain security documentation and audit trails.
• Develop and enforce information security policies and procedures.
• Mentor junior analysts and coordinate cross-functional security efforts.
• Monitor threats and participate in incident response.

Skills

Audit/Compliance

GRC

SOC 2

NIST

Policy development

Vendor risk

Education

Bachelor's degree in CS/IT or related field

Job description

Great Gray Group is seeking a Lead Information Security Analyst to drive governance, risk management, and security compliance across the organization. You will coordinate audit readiness, policy development, and cross-functional security initiatives within the Information Security team.

The role emphasizes collaboration, threat monitoring, and continuous improvement of the ISMS, with a remote-first arrangement for eligible U.S. states and a base pay range aligned to market standards.