Senior InfoSec & GRC Leader

Great Gray Group.; Ohio; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

401(k) with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk assessment, and security compliance across SOC 2 and NIST CSF. The role coordinates policy development and ISMS documentation while supporting enterprise risk management.

The position is remote from the United States, with state eligibility restrictions. Visa sponsorship is not available. Candidates must be authorized to work in the US.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5–10+ years of audit, compliance, or technical experience.
• Strong knowledge of IT security control trends and audit/compliance best practices.
• Excellent written and verbal communication to explain IT controls to leadership.

Responsibilities

• Lead GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST CSF, and industry standards.
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor risk management security assessments, onboarding, and reviews.
• Mentor Information Security Analysts in both analyst and GRC functions.
• Conduct vulnerability assessments, penetration testing, and security assessments.
• Participate in incident response activities and post-incident analysis.

Skills

GRC

Audit management

Risk assessment

Security compliance

Policy development

Vendor risk management

Mentor/leadership

Incident response

Vulnerability assessment

Penetration testing

Communication skills

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field

Job description

Great Gray Group is seeking a Lead Information Security Analyst to head IT governance, risk assessment, and security compliance across SOC 2 and NIST CSF. The role coordinates policy development and ISMS documentation while supporting enterprise risk management.

The position is remote from the United States, with state eligibility restrictions. Visa sponsorship is not available. Candidates must be authorized to work in the US.