Senior InfoSec & GRC Lead (SOC 2/NIST) | Remote

Great Gray Group.; Virginia Beach (VA); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health/dental/vision insurance

Life and disability insurance

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to drive governance, risk, and compliance across the enterprise. You will coordinate SOC 2 and NIST CSF programs, develop ISMS policies, and lead audits to protect retirement services systems.

This remote role is limited to US-based candidates where we are registered. You will mentor analysts, manage vendor risk, and ensure regulatory expectations are met in a fast-paced environment.

Qualifications

• 5-10+ years of audit, compliance or IT security experience.
• Strong knowledge of IT security controls and auditing best practices.
• Excellent written and verbal communication to explain IT controls to leadership.
• Relevant training or industry certifications in auditing or information security.
• Ability to manage multiple priorities in a fast-paced environment.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and industry standards.
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails.
• Develop and enforce information security policies and procedures.
• Vendor risk management assessments, onboarding, and reviews.
• Mentor and support Information Security Analysts in GRC.
• Conduct vulnerability assessments, penetration testing, and security assessments.
• Participate in incident response and post-incident analysis.

Skills

Audit experience

Compliance knowledge

IT security knowledge

Communication skills

Positive attitude

Certifications

Multi-tasking

Education

Bachelor's degree in CS/Cybersecurity/IT

Job description

Great Gray Group is seeking a Lead Information Security Analyst to drive governance, risk, and compliance across the enterprise. You will coordinate SOC 2 and NIST CSF programs, develop ISMS policies, and lead audits to protect retirement services systems.

This remote role is limited to US-based candidates where we are registered. You will mentor analysts, manage vendor risk, and ensure regulatory expectations are met in a fast-paced environment.