Senior Information Security & GRC Lead (Remote)

Great Gray Group.; Butlerville (IN); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk assessment and security compliance initiatives in the United States. The role focuses on SOC 2, NIST CSF, ISMS documentation, and policy development while coordinating audits and regulatory reviews.

The position is remote from the United States with location restrictions for state employment registration. Visa sponsorship is not available.

Qualifications

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST CSF, and industry standards.
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with relevant regulatory requirements and security frameworks (SOC 2, NIST, industry-specific standards).
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor Risk Management security assessments, onboarding, and reviews.
• Mentor and support the Information Security Analysts in both analyst and GRC functions.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications.
• Participate in incident response activities and conduct post-incident analysis.

Skills

GRC management

SOC 2

NIST CSF

Audit management

Regulatory compliance

Vendor risk management

Vulnerability assessment

Penetration testing

Incident response

Policy development

IT security governance

Effective communication

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Technology

Job description

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk assessment and security compliance initiatives in the United States. The role focuses on SOC 2, NIST CSF, ISMS documentation, and policy development while coordinating audits and regulatory reviews.

The position is remote from the United States with location restrictions for state employment registration. Visa sponsorship is not available.