Senior Information Security & GRC Lead (Remote)

Great Gray Group.; Central City (CO); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Group medical, dental, and vision

Employer-paid life and disability

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance initiatives across the organization. This role leads audits, policy development, and control testing while coordinating with functional partners to strengthen the ISMS.

The position is remote within the United States, requires residency in eligible states, and does not sponsor visas. Strong leadership and communication skills are essential for success.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing/best practices.
• Effective communication of IT controls to leadership and partners.
• Remote role restricted to states where employer is registered as an employer.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with regulatory requirements and security frameworks (SOC 2, NIST, etc.).
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor Risk Management security assessments, onboarding, and reviews.
• Mentor and support Information Security Analysts in GRC functions.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications.
• Participate in incident response activities and post-incident analysis.

Skills

GRC leadership

Audit management

Risk assessment

Regulatory compliance

IT security controls

Vendor risk management

Incident response

Technical communication

Security governance

Education

Bachelor’s degree in Computer Science or related field

Tools

GRC software

Job description

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance initiatives across the organization. This role leads audits, policy development, and control testing while coordinating with functional partners to strengthen the ISMS.

The position is remote within the United States, requires residency in eligible states, and does not sponsor visas. Strong leadership and communication skills are essential for success.