Great Gray Trust Company

Security Analyst

• Lead IT governance, risk assessment, and security compliance activities
• Support enterprise risk management and compliance with SOC 2, NIST Cybersecurity Framework, and other regulations and frameworks
• Coordinate the review, development, implementation, and documentation of ISMS policies, processes, procedures, and practices
• Lead and manage GRC functions, including compliance monitoring, audit management, and risk assessment
• Prepare for and manage compliance audits, assessments, and regulatory reviews
• Maintain security documentation, evidence, and audit trails
• Develop, maintain, and enforce information security policies and procedures
• Conduct vendor risk management security assessments, onboarding, and reviews
• Collaborate with cross-functional teams to integrate security and compliance into business processes
• Mentor and support Information Security Analysts
• Monitor security posture, identify threats, and recommend remediation measures
• Conduct vulnerability assessments, penetration testing, and security assessments
• Participate in incident response and conduct post-incident analysis
• Stay current with security trends, vulnerabilities, and emerging compliance requirements

Explore Lead Information Security Analyst at Great Gray Trust Company. Review requirements and application details.