Lead Information Security Analyst
Summary
Leads the GRC function at Great Gray Group, a retirement-services firm: manages SOC 2 and NIST compliance audits, risk assessments, security policies, vendor risk reviews, vulnerability assessments, and incident response while mentoring security analysts. Fully remote within approved US states.
The Role
Great Gray is seeking a Lead Information Security Analyst to join our Information Security team. This role will lead IT governance, risk assessment, and security compliance activities while supporting enterprise risk management and compliance with regulations and frameworks such as SOC 2 and the NIST Cybersecurity Framework. The analyst will also coordinate the review, development, implementation, and documentation of policies, processes, procedures, and practices that support the information security management system (ISMS).
Location
This position work remote from the United States. Please note that remote employment in this role is restricted to candidates residing in states where Great Gray is currently registered as an employer. These states are limited to: CA, CO, CT, DC, DE, FL, GA, IL, IN, MA, MD, MI, MN, NC, NH, NJ, NV, NY, OH, PA, RI, SC, TN, TX and VA.
Visa sponsorship or transfer of an existing visa is not available for this position. Applicants must be authorized to work directly for any employer in the United States without visa sponsorship or transfer.
Responsibilities
- Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
- Ensure compliance with relevant regulatory requirements and security frameworks (SOC 2, NIST, industry-specific standards, etc.)
- Prepare for and manage compliance audits, assessments, and regulatory reviews
- Maintain security documentation, evidence, and audit trails for compliance purposes
- Develop, maintain, and enforce information security policies and procedures
- Vendor Risk Management security assessments, onboarding, and reviews.
- Collaborate with cross-functional teams to integrate security and compliance into business processes
- Mentor and support the Information Security Analysts in both analyst and GRC functions
- Monitor security posture, identify threats, and recommend remediation measures
- Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications
- Participate in incident response activities and conduct post-incident analysis
- Stay current with security trends, vulnerabilities, and emerging compliance requirements
Qualifications & Experience
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- 5-10+ years of audit, compliance, or technical experience.
- Excellent knowledge of IT security control trends as well as auditing & compliance best practices.
- Effective communication skills (written and verbal) to properly articulate complicated IT controls and compliance issues to leadership and partners.
- Positive attitude and a strong commitment to delivering quality work.
- Relevant training and/or industry certifications in auditing, compliance, or IT security.
- Ability to thrive in a fast-paced, dynamic environment and manage multiple priorities effectively.
- Comfortable navigating ambiguity.
- Entrepreneurial mindset to bring best practice ideas to the team.
- Your standards reflect our core values: Growth Mindset, Disciplined Curiosity, Grit, Results Ownership, Collaboration.
Base Pay Range*
$120,000-$150,000
*This base pay range is subject to change and may be modified in the future.
The pay range displayed above is the base pay compensation range that Great Gray expects to pay for this position at the time of this posting. Individual compensation within this range, or that may warrant a provision for pay beyond this range, depends on multiple factors, including, but not limited to, candidate’s prior education and relevant work experience and training as well as position location and local market demands. Our pay-for-performance culture also includes participation in an annual incentive bonus plan for this position which is not included in the ‘Base Pay Range’ noted above.
Skills
As published by lever · 10 questions · 1 written answer
Basics
Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL, Other (e.g. portfolio, etc.) URL
Short answers (6)
- Full Legal Name
- Preferred Name optional
- What are your salary expectations for this position?
- Are you subject to any restrictive covenants that would preclude you from fully performing your work with another employer?
- When are you available to start a new position?
- Were you referred for this opportunity by a current employee at the organization? If yes, which employee? optional
Pick from a list (3)
- Are you legally authorized to work in the country you are applying to?
- Do you now or will you in the future require visa sponsorship or transfer of visa sponsorship (e.g., H-1B, O-1, TN, E-3) from another employer to maintain work authorization in the United States?
- By checking the box below, I certify that I have read and understand the applicant instructions included with this application and that the answers given by me to the foregoing questions and statements made by me are complete and true to the best of my knowledge and belief. I understand that any false information, omissions or misrepresentations of facts called for in this application, whether on this document or not, may result in rejection of my application or discharge at any time during my employment. I understand that this application form is intended for use in evaluating my qualifications for employment and that this application is not an offer of employment. I further understand that if hired, my employment will be considered "at-will" and that my employment may be terminated for any reason, with or without cause or notice, at any time by me or the Company and that this application is not intended to constitute a contract of continued employment. optional
Written answers (1)
- Address