Senior Remote InfoSec & GRC Leader (SOC 2/NIST)

Great Gray Group.; East Windsor Hill (CT); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Group medical, dental and vision

Employer-paid life and disability

Annual well-being stipend

401(k) plan with employer contribution

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk assessment, and security compliance efforts. The role focuses on SOC 2, NIST frameworks, and ISMS documentation, while coordinating policy development and audits.

A seasoned professional will mentor junior analysts, manage vendor risk, and drive a proactive security program. The position is remote within the United States, with eligibility confined to states where Great Gray is registered.

Qualifications

• Bachelor’s degree or higher in a technical field.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing/compliance best practices.
• Strong written and verbal communication to articulate IT controls to leadership.
• Certifications in auditing, compliance, or IT security are a plus.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with regulatory requirements and security frameworks (SOC 2, NIST, etc.).
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Conduct vendor risk assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to integrate security into business processes.
• Mentor Information Security Analysts in both analyst and GRC functions.
• Monitor security posture, identify threats, and recommend remediation measures.
• Conduct vulnerability assessments, penetration testing, and security assessments.

Skills

IT security controls

Auditing & compliance

GRC functions

Leadership communication

Regulatory awareness

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field

Job description

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk assessment, and security compliance efforts. The role focuses on SOC 2, NIST frameworks, and ISMS documentation, while coordinating policy development and audits.

A seasoned professional will mentor junior analysts, manage vendor risk, and drive a proactive security program. The position is remote within the United States, with eligibility confined to states where Great Gray is registered.