Senior Information Security & GRC Leader (Remote US)

Great Gray Group.; Crystal Bay (NV); A distancia; USD 120.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Group medical, dental and vision

Employer-paid life and disability

401(k) plan with employer match

Descripción de la vacante

Great Gray Group in the United States seeks a Lead Information Security Analyst to lead IT governance, risk assessment, and security compliance initiatives. You will coordinate policies, procedures, and ISMS documentation while supporting enterprise risk management.

The role is remote within the United States with state restrictions for eligibility. Strong background in SOC 2, NIST CSF, and vendor risk is required, along with excellent communication and leadership skills.

Formación

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5-10+ years of audit, compliance, or technical experience.
• Strong knowledge of IT security controls and audit/compliance best practices.
• Excellent written and verbal communication for leadership and partners.
• Ability to thrive in a fast-paced, dynamic environment with multiple priorities.

Responsabilidades

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with regulatory requirements and security frameworks (SOC 2, NIST, etc.)
• Prepare for and manage compliance audits, assessments, and regulatory reviews
• Maintain security documentation, evidence, and audit trails for compliance purposes
• Develop, maintain, and enforce information security policies and procedures
• Vendor Risk Management security assessments, onboarding, and reviews.
• Mentor and support the Information Security Analysts in both analyst and GRC functions
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications
• Participate in incident response activities and conduct post-incident analysis

Conocimientos

GRC governance

Audit management

Risk assessment

Compliance monitoring

SOC 2

NIST CSF

Information security policies

Vendor risk management

Incident response

Vulnerability assessments

Penetration testing

Security documentation

Communication skills

Mentoring

Educación

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field

Descripción del empleo

Great Gray Group in the United States seeks a Lead Information Security Analyst to lead IT governance, risk assessment, and security compliance initiatives. You will coordinate policies, procedures, and ISMS documentation while supporting enterprise risk management.

The role is remote within the United States with state restrictions for eligibility. Strong background in SOC 2, NIST CSF, and vendor risk is required, along with excellent communication and leadership skills.