Senior InfoSec & GRC Leader – Remote

Great Gray Group.; Minnesota; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Group medical, dental, and vision

Employer-paid life and disability

Annual well-being stipend

401(k) employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to guide GRC, risk assessments, and security compliance initiatives across the enterprise. This role supports enterprise risk management and the ISMS with a focus on SOC 2 and NIST CSF frameworks.

You will develop, implement, and maintain information security policies and procedures, manage audits, and mentor analysts while collaborating with cross-functional teams to embed security into business processes.

Qualifications

• Bachelor’s degree in CS, cybersecurity, IT, or related field.
• 5–10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security controls trends and auditing best practices.
• Strong written and verbal communication to convey IT controls to leadership.
• Proactive, quality-driven with the ability to prioritize multiple tasks.
• Relevant certifications in auditing, compliance, or IT security.
• Thrives in a fast-paced environment with an entrepreneurial mindset.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST frameworks and other standards.
• Prepare for and manage compliance audits and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance.
• Develop, maintain, and enforce information security policies and procedures.
• Conduct vendor risk assessments and reviews.
• Collaborate with cross-functional teams to integrate security into processes.
• Mentor Information Security Analysts in GRC functions.
• Monitor security posture and identify remediation measures.
• Conduct vulnerability assessments and security testing.
• Participate in incident response activities and post-incident analysis.
• Stay current with security trends and regulatory requirements.

Skills

Audit & compliance knowledge

IT security controls knowledge

Excellent communication

Fast-paced environment

Entrepreneurial mindset

Growth mindset

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field

Job description

Great Gray Group is seeking a Lead Information Security Analyst to guide GRC, risk assessments, and security compliance initiatives across the enterprise. This role supports enterprise risk management and the ISMS with a focus on SOC 2 and NIST CSF frameworks.

You will develop, implement, and maintain information security policies and procedures, manage audits, and mentor analysts while collaborating with cross-functional teams to embed security into business processes.