Senior Information Security & GRC Lead (SOC 2/NIST) Remote

Great Gray Group.; Elm (PA); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk, and compliance activities across the organization in the United States, with remote work limited to eligible states. You will drive SOC 2 and NIST CSF alignment, develop and document ISMS policies, and mentor junior analysts.

Responsibilities include conducting risk assessments, audits, and vendor reviews, managing security evidence, and coordinating incident response.

Qualifications

• 5-10+ years of audit, compliance, or technical experience.
• Strong knowledge of IT security controls and audit practices.
• Excellent written and verbal communication for leadership and partners.
• Ability to thrive in a fast-paced environment with multiple priorities.

Responsibilities

• Lead and manage GRC functions including compliance monitoring and risk assessment.
• Ensure compliance with regulatory requirements and security frameworks (SOC 2, NIST).
• Prepare for and manage audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance.
• Develop, maintain, and enforce information security policies and procedures.
• Conduct vendor risk assessments, onboarding, and reviews.
• Mentor Information Security Analysts in both analyst and GRC functions.
• Conduct vulnerability assessments, penetration testing, and security assessments.
• Participate in incident response activities and post-incident analysis.

Skills

GRC leadership

Audit management

Regulatory compliance

Incident response

Vulnerability assessment

Penetration testing

Vendor risk management

Communication skills

Team mentorship

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Technology

Tools

SOC 2 framework

NIST CSF

Job description

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk, and compliance activities across the organization in the United States, with remote work limited to eligible states. You will drive SOC 2 and NIST CSF alignment, develop and document ISMS policies, and mentor junior analysts.

Responsibilities include conducting risk assessments, audits, and vendor reviews, managing security evidence, and coordinating incident response.