Senior InfoSec & GRC Lead (Remote US)

Great Gray Group.; Maryland City (MD); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance initiatives. The role will coordinate audits and documentation for the ISMS while supporting enterprise risk management, SOC 2, and the NIST Cybersecurity Framework.

This position is remote from the United States, restricted to states where Great Gray is registered. A bachelor’s degree and 5–10+ years of audit/compliance experience are required, with related

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5–10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing & compliance best practices.
• Effective written and verbal communication to articulate IT controls to leadership.
• Relevant training and/or industry certifications in auditing, compliance, or IT security.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and industry-specific security requirements.
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor risk management security assessments, onboarding, and reviews.
• Mentor and support Information Security Analysts in both analyst and GRC functions.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications.
• Participate in incident response activities and post-incident analysis.

Skills

GRC management

Audit & compliance knowledge

IT security controls

Communication skills

Risk assessment

Education

Bachelor’s degree in Computer Science or related field

Tools

SOC 2

NIST CSF

Job description

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk assessment, and security compliance initiatives. The role will coordinate audits and documentation for the ISMS while supporting enterprise risk management, SOC 2, and the NIST Cybersecurity Framework.

This position is remote from the United States, restricted to states where Great Gray is registered. A bachelor’s degree and 5–10+ years of audit/compliance experience are required, with related