Senior Information Security & GRC Lead (Remote USA)

Great Gray Group.; Milton (MA); Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Life and disability insurance

401(k) plan

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to drive governance, risk, and compliance across the enterprise while shaping security strategy and policy.

This remote US role requires experience with SOC 2, NIST CSF, and building secure, auditable processes. You will mentor analysts, coordinate audits, and partner with IT and business units.

Applicants must be authorized to work in the United States and reside in states where Great Gray is registered.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5–10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing & compliance best practices.
• Effective communication skills to articulate IT controls to leadership and partners.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with regulatory requirements and security frameworks (SOC 2, NIST, etc.).
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor risk management security assessments, onboarding, and reviews.
• Mentor and support Information Security Analysts in both analyst and GRC functions.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications.
• Participate in incident response activities and conduct post-incident analysis.

Skills

GRC management

Compliance monitoring

Audit management

Risk assessment

Incident response

Mentoring

Education

Bachelor’s degree in Computer Science / Cybersecurity / IT

Tools

SOC 2

NIST CSF

Job description

Great Gray Group is seeking a Lead Information Security Analyst to drive governance, risk, and compliance across the enterprise while shaping security strategy and policy.

This remote US role requires experience with SOC 2, NIST CSF, and building secure, auditable processes. You will mentor analysts, coordinate audits, and partner with IT and business units.

Applicants must be authorized to work in the United States and reside in states where Great Gray is registered.