Senior Information Security & GRC Lead (Remote)

Great Gray Group.; Bristol (RI); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Group medical, dental and vision 'ins'

Employer-paid life and disability保险

401(k) plan with employer contribution

Job summary

Great Gray Group in the United States is seeking a Lead Information Security Analyst to head IT governance, risk management, and security compliance activities. You will oversee policy development, audits, and documentation to support the ISMS and regulatory requirements.

This remote role is restricted to states where the company is registered. You will mentor security analysts, coordinate incident response, and ensure ongoing alignment with SOC 2, NIST CSF, and industry standards.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology or a related field.
• 5-10+ years of audit, compliance, or technical experience.
• Strong knowledge of IT security controls and auditing best practices.
• Excellent written and verbal communication for leadership and partners.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with regulatory requirements and security frameworks (SOC 2, NIST, etc.).
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor Risk Management security assessments, onboarding, and reviews.
• Mentor and support Information Security Analysts in both analyst and GRC functions.
• Conduct vulnerability assessments, penetration testing, and security assessments.
• Participate in incident response activities and post-incident analysis.

Skills

GRC leadership

SOC 2 compliance

NIST CSF

Audit management

Policy development

Vendor risk management

Incident response

Security governance

Communication skills

Education

Bachelor's degree in Computer Science / Cybersecurity / Information Technology

Job description

Great Gray Group in the United States is seeking a Lead Information Security Analyst to head IT governance, risk management, and security compliance activities. You will oversee policy development, audits, and documentation to support the ISMS and regulatory requirements.

This remote role is restricted to states where the company is registered. You will mentor security analysts, coordinate incident response, and ensure ongoing alignment with SOC 2, NIST CSF, and industry standards.