Lead Information Security Analyst

Great Gray

1d • $120,000 - $150,000 • Remote

About The Position

Great Gray is seeking a Lead Information Security Analyst to join their Information Security team. This role will lead IT governance, risk assessment, and security compliance activities while supporting enterprise risk management and compliance with regulations and frameworks such as SOC 2 and the NIST Cybersecurity Framework. The analyst will also coordinate the review, development, implementation, and documentation of policies, processes, procedures, and practices that support the information security management system (ISMS).

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends as well as auditing & compliance best practices.
• Effective communication skills (written and verbal) to properly articulate complicated IT controls and compliance issues to leadership and partners.
• Positive attitude and a strong commitment to delivering quality work.
• Relevant training and/or industry certifications in auditing, compliance, or IT security.
• Ability to thrive in a fast-paced, dynamic environment and manage multiple priorities effectively.
• Comfortable navigating ambiguity.
• Entrepreneurial mindset to bring best practice ideas to the team.

Responsibilities

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with relevant regulatory requirements and security frameworks (SOC 2, NIST, industry-specific standards, etc.)
• Prepare for and manage compliance audits, assessments, and regulatory reviews
• Maintain security documentation, evidence, and audit trails for compliance purposes
• Develop, maintain, and enforce information security policies and procedures
• Vendor Risk Management security assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to integrate security and compliance into business processes
• Mentor and support the Information Security Analysts in both analyst and GRC functions
• Monitor security posture, identify threats, and recommend remediation measures
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications
• Participate in incident response activities and conduct post-incident analysis
• Stay current with security trends, vulnerabilities, and emerging compliance requirements

Benefits

• Be an integral part of a high-growth organization!
• Competitive compensation package
• Group medical, dental and vision insurance
• Employer-paid life and disability insurance
• Annual well-being stipend
• Eligible employees may also contribute to a 401(k) plan with an advantageous employer contribution model, upholding our mission to support our employees in retirement

What This Job Offers

• Job Type: Full-time
• Career Level: Senior