Senior Information Security Analyst — Hybrid, Risk & Compliance

Great Gray Group.; Wilmington (DE); Hybrid; USD 95,000 - 140,000; Full time

Benefits offered by this job

Competitive compensation package

Medical, dental, and vision insurance

Life and disability insurance

Annual well-being stipend

401(k) with employer contribution

Job summary

Great Gray Group is seeking a Senior Information Security Analyst to support IT governance, risk assessment, and security compliance within the Information Security Team. Hybrid work options with offices in Boston, MA or Wilmington, DE, with 4 days onsite and 1 day remote.

The role focuses on reviewing and maintaining ISMS policies and controls, ensuring SOC2, CIS18, and NIST CSF alignment, and facilitating documentation and implementation across IT security programs.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing & compliance best practices.
• Effective communication skills to articulate IT controls to leadership and partners.
• Relevant certifications in auditing, compliance, or IT security.

Responsibilities

• IT governance, risk assessment, and security awareness.
• Audit and evidence collection for IT controls (PCI, SOX) and SOC2.
• Vendor risk management assessment, onboarding, and reviews.
• Business Impact Analysis (BIA) and Sensitive Data Reviews (SDR).
• URM and PAM reviews for critical applications.
• Support design and implementation of technical control requirements.
• Identify and implement improvements to key controls and processes.
• Collaborate with control owners to ensure operability of controls.
• Review IT systems and tools to include appropriate controls.
• Remediate IT control gaps and elevate issues to management.
• Update IT documentation to reflect processes and controls.

Skills

IT governance

Risk assessment

Security controls

Auditing & compliance

Vendor risk management

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field

Tools

SOC2

NIST CSF

Job description

Great Gray Group is seeking a Senior Information Security Analyst to support IT governance, risk assessment, and security compliance within the Information Security Team. Hybrid work options with offices in Boston, MA or Wilmington, DE, with 4 days onsite and 1 day remote.

The role focuses on reviewing and maintaining ISMS policies and controls, ensuring SOC2, CIS18, and NIST CSF alignment, and facilitating documentation and implementation across IT security programs.