Senior GRC & Security Lead - SOC 2/NIST, Remote

Great Gray Group.; Salem (NH); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical dental vision

Life and disability

Well-being stipend

401(k) plan

Growth opportunities

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk assessment, and security compliance while supporting enterprise risk management. The role focuses on SOC 2, NIST frameworks, and ISMS documentation, reporting to the Information Security team.

Remote work from the United States is allowed, with state restrictions where the employer is registered. Strong leadership and 5–10+ years in audit/compliance are required, as well as relevant certifications.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 5–10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing best practices.
• Effective written and verbal communication to articulate IT controls to leadership.
• Relevant certifications in auditing, compliance, or IT security.
• Ability to thrive in a fast-paced, dynamic environment and manage multiple priorities.
• Comfortable navigating ambiguity.
• Entrepreneurial mindset to bring best practices to the team.
• Core values alignment: Growth Mindset, Disciplined Curiosity, Grit, Results Ownership, Collaboration.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and industry standards.
• Prepare for and manage audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor risk management security assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to integrate security into business processes.
• Mentor Information Security Analysts in both analyst and GRC functions.
• Monitor security posture, identify threats, and recommend remediation measures.
• Conduct vulnerability assessments, penetration testing, and security assessments.
• Participate in incident response activities and post-incident analysis.
• Stay current with security trends and emerging requirements.

Skills

Audit & compliance

IT security controls

Communication skills

Leadership

Vendor risk management

Education

Bachelor's degree in CS/IT

Job description

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk assessment, and security compliance while supporting enterprise risk management. The role focuses on SOC 2, NIST frameworks, and ISMS documentation, reporting to the Information Security team.

Remote work from the United States is allowed, with state restrictions where the employer is registered. Strong leadership and 5–10+ years in audit/compliance are required, as well as relevant certifications.