Senior Security & GRC Lead (SOC 2/NIST)

Great Gray Group.; North Carolina; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Group medical, dental & vision

Employer-paid life & disability

Annual well-being stipend

401(k) matching

Job summary

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk assessment, and security compliance activities within our Information Security team. You will coordinate policies and practices to support the ISMS, drive audits, and improve security posture across the organization.

The role requires 5–10+ years in audit/compliance, strong IT security controls knowledge, and the ability to mentor analysts.

Qualifications

• 5–10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends and auditing & compliance best practices.
• Effective written and verbal communication to articulate IT controls to leadership.
• Training and/or industry certifications in auditing, compliance, or IT security.
• Ability to thrive in a fast-paced, dynamic environment and manage multiple priorities.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and industry standards.
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor Risk Management security assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to integrate security and compliance into business processes.
• Mentor and support the Information Security Analysts in GRC functions.
• Monitor security posture, identify threats, and recommend remediation measures.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications.
• Participate in incident response activities and post-incident analysis.
• Stay current with security trends and emerging compliance requirements.

Skills

GRC knowledge

Audit & compliance

Communication skills

Ambiguity tolerance

Entrepreneurial mindset

Education

Bachelor's degree in CS/IT/Cybersecurity

Job description

Great Gray Group is seeking a Lead Information Security Analyst to lead IT governance, risk assessment, and security compliance activities within our Information Security team. You will coordinate policies and practices to support the ISMS, drive audits, and improve security posture across the organization.

The role requires 5–10+ years in audit/compliance, strong IT security controls knowledge, and the ability to mentor analysts.