Lead Information Security Analyst

Great Gray Trust Company

. Lead IT governance, risk assessment, and security compliance activities .

Posted 10/10/2026full-timeRemote • United StatesSenior💰 $120,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT governance, risk management, and compliance with frameworks such as SOC 2 and NIST Cybersecurity Framework. Proficient in developing and enforcing information security policies while managing audits and vendor risk assessments.

Highest-signal resume keywords

IT GovernanceRisk AssessmentSOC 2 ComplianceNIST Cybersecurity FrameworkInformation Security Policies

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Audit ManagementCompliance MonitoringVulnerability AssessmentPenetration TestingSecurity AssessmentsIncident ResponseISMS DevelopmentSecurity DocumentationRegulatory ReviewsVendor Risk Management

Soft Skills

Effective CommunicationMentoringPrioritizationAdaptabilityEntrepreneurial Mindset

Certifications & Qualifications

Relevant Industry Certifications

Industry Keywords

Information SecurityComplianceRisk ManagementAuditCybersecurity

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead IT governance, risk assessment, and security compliance activities
Support enterprise risk management and compliance with SOC 2, NIST Cybersecurity Framework, and other regulations and frameworks
Coordinate the review, development, implementation, and documentation of ISMS policies, processes, procedures, and practices
Lead and manage GRC functions, including compliance monitoring, audit management, and risk assessment
Prepare for and manage compliance audits, assessments, and regulatory reviews
Maintain security documentation, evidence, and audit trails
Develop, maintain, and enforce information security policies and procedures
Conduct vendor risk management security assessments, onboarding, and reviews
Collaborate with cross-functional teams to integrate security and compliance into business processes
Mentor and support Information Security Analysts
Monitor security posture, identify threats, and recommend remediation measures
Conduct vulnerability assessments, penetration testing, and security assessments
Participate in incident response and conduct post-incident analysis
Stay current with security trends, vulnerabilities, and emerging compliance requirements

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field
5-10+ years of audit, compliance, or technical experience
Excellent knowledge of IT security control trends and auditing and compliance best practices
Effective written and verbal communication skills to articulate complicated IT controls and compliance issues
Relevant training and/or industry certifications in auditing, compliance, or IT security
Ability to manage multiple priorities in a fast-paced, dynamic environment
Comfortable navigating ambiguity
Entrepreneurial mindset
Must reside in one of the registered states: California, Colorado, Connecticut, District of Columbia, Delaware, Florida, Georgia, Illinois, Indiana, Massachusetts, Maryland, Michigan, Minnesota, North Carolina, New Hampshire, New Jersey, Nevada, New York, Ohio, Pennsylvania, Rhode Island, South Carolina, Tennessee, Texas, or Virginia
Must be authorized to work directly for any employer in the United States without visa sponsorship or transfer

Benefits

Comp & perks

Be an integral part of a high-growth organization
Competitive compensation package
Group medical, dental and vision insurance
Employer-paid life and disability insurance
Annual well-being stipend
Eligible employees may contribute to a 401(k) plan with an advantageous employer contribution model
Annual incentive bonus plan participation