Senior Information Security Analyst – Hybrid (SOC2/PCI)

Great Gray Group.; Wilmington, Northern (MA, KY); Hybrid; USD 95,000 - 120,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

Annual well-being stipend

401(k) with employer contribution

Job summary

Great Gray Group seeks a Senior Information Security Analyst to support IT governance, risk assessment, and security compliance with SOC 2, CIS 18, and NIST CSF. You will implement and document ISMS policies and controls across governance, risk, and compliance activities.

The role is hybrid, based in Boston, MA or Wilmington, DE, with 4 days onsite and 1 day remote. Visa sponsorship is not available; U.S. work authorization is required.

Qualifications

• Bachelor’s degree in a related field.
• 5+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing/best practices.
• Effective written and verbal communication to leadership and partners.

Responsibilities

• IT governance, oversight, risk assessment, and security awareness.
• Auditing and evidence collection for IT controls compliance (PCI, SOX) and SOC 2 frameworks.
• Vendor risk management assessments and reviews.
• Business Impact Analysis and Sensitive Data Reviews.
• URM and PAM reviews for critical applications.

Skills

IT governance

Risk assessment

Security awareness

Audit/compliance knowledge

Communication skills

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology

Tools

SOC 2

CIS 18

NIST CSF

Job description

Great Gray Group seeks a Senior Information Security Analyst to support IT governance, risk assessment, and security compliance with SOC 2, CIS 18, and NIST CSF. You will implement and document ISMS policies and controls across governance, risk, and compliance activities.

The role is hybrid, based in Boston, MA or Wilmington, DE, with 4 days onsite and 1 day remote. Visa sponsorship is not available; U.S. work authorization is required.