Senior InfoSec & GRC Lead (SOC 2/NIST) — Remote US

Great Gray Group.; Massachusetts; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk, and compliance across the organization. You will lead audits, document ISMS policies, and coordinate security controls with cross-functional teams.

This remote role requires US residency and no visa sponsorship. You will mentor analysts, perform vulnerability assessments, and manage vendor risk and incident response in a fast-paced environment.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 5-10+ years of audit, compliance, or technical experience.
• Strong knowledge of IT security controls and auditing best practices.
• Ability to communicate IT controls and compliance issues to leadership.

Responsibilities

• Lead IT governance, risk assessment, and security compliance activities.
• Coordinate the review, development, and documentation of ISMS policies and procedures.
• Manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails.
• Conduct vulnerability assessments and security assessments on systems and applications.
• Mentor Information Security Analysts in GRC functions.
• Perform incident response activities and post-incident analysis.
• Support vendor risk management activities and onboarding.

Skills

GRC management

Regulatory compliance

Vulnerability assessments

Incident response

Security documentation

Vendor risk management

Mentoring and leadership

IT security controls

Effective communication

Education

Bachelor’s degree in Computer Science/Cybersecurity/IT

Tools

SOC 2

NIST Cybersecurity Framework

Job description

Great Gray Group is seeking a Lead Information Security Analyst to drive IT governance, risk, and compliance across the organization. You will lead audits, document ISMS policies, and coordinate security controls with cross-functional teams.

This remote role requires US residency and no visa sponsorship. You will mentor analysts, perform vulnerability assessments, and manage vendor risk and incident response in a fast-paced environment.