Senior Information Security Analyst

Great Gray • Boston, MA

10h • Hybrid

About The Position

Great Gray is looking to add a Senior Information Security Analyst on our Information Security Team. The role will support IT governance, risk assessment, and security compliance functions and will be involved in monitoring and maintaining elements of overall IT governance, enterprise risk management, and compliance with regulations and control frameworks such as SOC2, CIS18, and NIST CSF. The analyst will focus on facilitating the review, development, implementation, and documentation supporting the ISMS policies, processes, procedures, and practices.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends as well as auditing & compliance best practices.
• Effective communication skills (written and verbal) to properly articulate complicated IT controls and compliance issues to leadership and partners.
• Positive attitude and a strong commitment to delivering quality work.
• Relevant training and/or industry certifications in auditing, compliance, or IT security.
• Ability to thrive in a fast-paced, dynamic environment and manage multiple priorities effectively.
• Comfortable navigating ambiguity.
• Entrepreneurial mindset to bring best practice ideas to the team.
• Your standards reflect our core values: Growth Mindset, Disciplined Curiosity, Grit, Results Ownership, Collaboration.

Responsibilities

• IT governance & oversight, risk assessment, and security awareness.
• Internal auditing & evidence collection for IT controls compliance (PCI, SOX) and cybersecurity ISMS frameworks (SOC2)
• Vendor Risk Management assessment, onboarding, and reviews.
• Business Impact Analysis (BIA), and Sensitive Data Reviews (SDR).
• User Rights Management (URM) and Privileged Access Management (PAM) reviews for critical applications.
• Provide support in the assessment, design, and implementation of technical control requirements.
• Identify and recommend changes to improve efficiency and the effectiveness of key technical controls and processes.
• Work with control owners and system administrators to ensure quality, consistency, and operability of new and existing controls.
• Support the review of IT systems and tools to ensure the inclusion of appropriate controls and processes.
• Review test findings, support the remediation of IT control gaps, and escalate potential issues to management, where necessary.
• Validate and update IT documentation as needed to ensure processes, policies and controls are accurate.
• Complete other related duties as assigned

Benefits

• Competitive compensation package
• Group medical, dental and vision insurance
• Employer-paid life and disability insurance
• Annual well-being stipend
• Eligible employees may also contribute to a 401(k) plan with an advantageous employer contribution model

What This Job Offers

• Job Type: Full-time
• Career Level: Senior