Senior Information Security & GRC Leader (Remote)

Great Gray Group.; Washington (District of Columbia); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Group health, dental and vision ins.

Employer-paid life and disability ins.

401(k) plan with employer contribution

Job summary

Great Gray Group seeks a Lead Information Security Analyst to drive IT governance, risk management, and security compliance across the enterprise. You will establish and maintain the ISMS, coordinate audits, and ensure SOC 2 and NIST CSF alignment while guiding a team of security professionals.

This remote role requires strong communication and the ability to operate in a fast-paced environment. You will mentor analysts, manage vendor risk, perform vulnerability assessments, and drive continuous

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends as well as auditing & compliance best practices.
• Effective communication skills to articulate IT controls and compliance issues to leadership.
• Ability to thrive in a fast-paced, dynamic environment and manage multiple priorities.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with relevant regulatory requirements and security frameworks (SOC 2, NIST, industry-specific standards, etc.)
• Prepare for and manage compliance audits, assessments, and regulatory reviews
• Maintain security documentation, evidence, and audit trails for compliance purposes
• Develop, maintain, and enforce information security policies and procedures
• Vendor Risk Management security assessments, onboarding, and reviews.
• Mentor and support the Information Security Analysts in both analyst and GRC functions
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications
• Participate in incident response activities and conduct post-incident analysis

Skills

GRC leadership

Regulatory compliance

Audit management

Security assessments

Incident response

Policy development

Vendor risk management

Mentoring

Effective communication

Fast-paced environment

Education

Bachelor's degree in Computer Science/Information Security/Cybersecurity

Job description

Great Gray Group seeks a Lead Information Security Analyst to drive IT governance, risk management, and security compliance across the enterprise. You will establish and maintain the ISMS, coordinate audits, and ensure SOC 2 and NIST CSF alignment while guiding a team of security professionals.

This remote role requires strong communication and the ability to operate in a fast-paced environment. You will mentor analysts, manage vendor risk, perform vulnerability assessments, and drive continuous