Senior InfoSec & GRC Lead (SOC 2, NIST, Audit) - Remote

Great Gray Group.; Yorktown (VA); Remote; USD 110.000 - 170.000; Vollzeit

Benefits dieser Stelle

Group medical, dental and vision保险

Employer-paid life and disability保险

401(k) plan with advantageous employer

Zusammenfassung

Great Gray Group is seeking a Lead Information Security Analyst to guide IT governance, risk assessment, and security compliance activities. You will support enterprise risk management and ensure compliance with SOC 2, NIST CSF, and other standards.

This remote US role requires a Bachelor's degree and 5–10+ years of experience, with strong communication skills and the ability to mentor junior analysts while driving security programs, policies, and audits across the organization.

Qualifikationen

• Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field.
• 5–10+ years in audit, compliance, or technical IT security roles.
• Strong knowledge of IT security controls, auditing, and compliance practices.
• Excellent written and verbal communication for leadership audiences.
• Ability to thrive in fast-paced environments with multiple priorities.
• Relevant training or certifications in auditing, compliance, or IT security.

Aufgaben

• Lead GRC functions including compliance monitoring and risk assessment.
• Ensure SOC 2 and NIST CSF compliance across systems.
• Prepare for audits, assessments, regulatory reviews.
• Maintain security documentation and audit trails.
• Develop and enforce security policies and procedures.
• Conduct vulnerability assessments, penetration testing, and incident response participation.
• Mentor Information Security Analysts.

Kenntnisse

GRC management

Audit & compliance

SOC 2

NIST CSF

Incident response

Vulnerability testing

Penetration testing

Policy development

Vendor risk management

Leadership

Ausbildung

Bachelor’s degree in CS/Cybersecurity/IT

Jobbeschreibung

Great Gray Group is seeking a Lead Information Security Analyst to guide IT governance, risk assessment, and security compliance activities. You will support enterprise risk management and ensure compliance with SOC 2, NIST CSF, and other standards.

This remote US role requires a Bachelor's degree and 5–10+ years of experience, with strong communication skills and the ability to mentor junior analysts while driving security programs, policies, and audits across the organization.