Senior Information Security & GRC Lead (SOC 2/NIST)

Great Gray Group.; Annapolis (MD); Remoto; USD 110.000 - 170.000; Tempo pieno

Vantaggi offerti da questo lavoro

Group medical, dental and vision

Employer-paid life and disability

401(k) plan with employer contribution

Descrizione del lavoro

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and compliance initiatives across the enterprise. You will coordinate audits, develop security policies, and ensure alignment with SOC 2, NIST CSF, and industry standards while supporting the ISMS program.

This remote role is limited to states where the company is registered. You will mentor junior analysts, perform vulnerability assessments and testing, and collaborate with partners to

Competenze

• Bachelor's degree in CS, cybersecurity, IT or related field.
• 5-10+ years of audit, compliance, or technical experience.
• Strong knowledge of IT security controls and auditing practices.
• Excellent written and verbal communication for leadership and partners.
• Proactive, quality-focused with ability to handle multiple priorities.
• Relevant certifications in auditing, compliance, or IT security.

Mansioni

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST CSF, and other standards.
• Prepare for and manage compliance audits and regulatory reviews.
• Maintain security documentation, evidence, and audit trails.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor risk management assessments, onboarding, and reviews.
• Mentor and support Information Security Analysts in GRC functions.
• Conduct vulnerability assessments, penetration testing, and security testing.
• Participate in incident response activities and post-incident analysis.

Conoscenze

GRC management

Audit & compliance

IT security controls

Vulnerability assessment

Penetration testing

Incident response

Regulatory frameworks

Vendor risk management

Mentoring

Communication skills

Formazione

Bachelor's degree in CS/ Cybersecurity/ IT

Relevant certifications in auditing/compliance/IT security

Descrizione del lavoro

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and compliance initiatives across the enterprise. You will coordinate audits, develop security policies, and ensure alignment with SOC 2, NIST CSF, and industry standards while supporting the ISMS program.

This remote role is limited to states where the company is registered. You will mentor junior analysts, perform vulnerability assessments and testing, and collaborate with partners to