Senior InfoSec Analyst — Hybrid Role in Compliance & Risk

Great Gray; Boston (MA); Hybrid; USD 95,000 - 120,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

Employer-paid life and disability ins.

Annual well-being stipend

401(k) with employer contribution

Job summary

Great Gray is seeking a Senior Information Security Analyst to support IT governance, risk assessment, and security compliance across SOC2, CIS18, and NIST CSF frameworks. The role focuses on developing and documenting ISMS policies, processes, and controls, with collaboration across IT and business units.

The position offers a hybrid model (4 days onsite, 1 day remote) in Boston, MA or Wilmington, DE. Salary ranges from $95,000 to $120,000 with potential annual incentive bonus and comprehensive

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing & compliance best practices.
• Effective communication skills to articulate complex IT controls and compliance issues to leadership.
• Relevant training and/or industry certifications in auditing, compliance, or IT security.

Responsibilities

• IT governance, risk assessment, and security awareness.
• Internal auditing & evidence collection for IT controls compliance (PCI, SOX) and SOC2.
• Vendor risk management assessment, onboarding, and reviews.
• Business impact analysis (BIA) and sensitive data reviews (SDR).
• URM and PAM reviews for critical applications.
• Support in assessment, design, and implementation of technical control requirements.
• Identify and recommend changes to improve efficiency of key controls.
• Collaborate with control owners to ensure quality and operability of controls.
• Review IT systems and tools to ensure appropriate controls.
• Review test findings and remediate IT control gaps.

Skills

IT governance

Auditing & compliance

Security awareness

Communication skills

SOC2

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field

Job description

Great Gray is seeking a Senior Information Security Analyst to support IT governance, risk assessment, and security compliance across SOC2, CIS18, and NIST CSF frameworks. The role focuses on developing and documenting ISMS policies, processes, and controls, with collaboration across IT and business units.

The position offers a hybrid model (4 days onsite, 1 day remote) in Boston, MA or Wilmington, DE. Salary ranges from $95,000 to $120,000 with potential annual incentive bonus and comprehensive