Lead Info Security Analyst-Risk
Great Gray
At Great Gray Group, we strive to set the bar for the retirement services industry. Our goal is to deliver advanced retirement solutions that combine our core fiduciary services with robust investment options, innovative technology, and dedicated client service. Every day, we look for opportunities to better serve our clients, be an excellent business partner, and earn the trust of those who rely on us.
Lead Information Security Analyst
Information Security
This role will lead IT governance, risk assessment, and security compliance activities while supporting enterprise risk management and compliance with regulations and frameworks such as SOC 2 and the NIST Cybersecurity Framework. The analyst will also coordinate the review, development, implementation, and documentation of policies, processes, procedures, and practices that support the information security management system (ISMS).
This position work remote from the United States. Please note that remote employment in this role is restricted to candidates residing in states where Great Gray is currently registered as an employer. Visa sponsorship or transfer of an existing visa is not available for this position. Applicants must be authorized to work directly for any employer in the United States without visa sponsorship or transfer.
Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
Ensure compliance with relevant regulatory requirements and security frameworks (SOC 2, NIST, industry-specific standards, etc.)
Prepare for and manage compliance audits, assessments, and regulatory reviews
Maintain security documentation, evidence, and audit trails for compliance purposes
Develop, maintain, and enforce information security policies and procedures
Vendor Risk Management security assessments, onboarding, and reviews.
Mentor and support the Information Security Analysts in both analyst and GRC functions
Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications
Participate in incident response activities and conduct post-incident analysis
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
5-10+ years of audit, compliance, or technical experience.
Excellent knowledge of IT security control trends as well as auditing & compliance best practices.
Effective communication skills (written and verbal) to properly articulate complicated IT controls and compliance issues to leadership and partners.
Positive attitude and a strong commitment to delivering quality work.
Relevant training and/or industry certifications in auditing, compliance, or IT security.
Ability to thrive in a fast-paced, dynamic environment and manage multiple priorities effectively.
Individual compensation within this range, or that may warrant a provision for pay beyond this range, depends on multiple factors, including, but not limited to, candidate’s prior education and relevant work experience and training as well as position location and local market demands. Our pay-for-performance culture also includes participation in an annual incentive bonus plan for this position which is not included in the ‘Base Pay Range’ noted above.
\Group medical, dental and vision insurance
· Employer-paid life and disability insurance
· Eligible employees may also contribute to a 401(k) plan with an advantageous employer contribution model, upholding our mission to support our employees in retirement
Great Gray is the leading independent provider of trustee and administrative services to Collective Investment Trusts (“CITs”), with over $385 billion in CIT assets under management, across more than 1,045 funds. CITs are more than just an investment vehicle. They represent a forward-thinking approach to retirement planning. These tax-exempt, pooled investment vehicles are offered to employer-sponsored retirement plans, like 401(k)s. CITs are comparable to mutual funds, but, because they are tailored for the institutional retirement market, they can offer distinct advantages, including efficient administration and cost-effectiveness. Great Gray has consistently delivered year-over-year growth at an above market rate and is investing in the continued development of its core CIT business as well as complementary administrative services and technology solutions for the retirement market.
Investor Background
MDP is a leading private equity investment firm based in Chicago. Since MDP's formation in 1992, the firm has raised aggregate capital of over $37 billion and has completed over 160 platform investments across nine flagship funds. MDP invests across five dedicated industry verticals, including financial services, healthcare, technology and government services.
Equal Employment Opportunity Policy
Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status or other non-merit factor.
Great Gray is committed to ensuring individuals with disabilities and/or those who have special needs participate in the workforce and are afforded equal opportunity to apply and compete for jobs. If you would like to contact us regarding the accessibility of our website, need assistance completing the application process, or need to request an accommodation for any part of our application or interview process, please contact us at:
Lead Information Security Analyst
Information Security
This role will lead IT governance, risk assessment, and security compliance activities while supporting enterprise risk management and compliance with regulations and frameworks such as SOC 2 and the NIST Cybersecurity Framework. The analyst will also coordinate the review, development, implementation, and documentation of policies, processes, procedures, and practices that support the information security management system (ISMS).
This position work remote from the United States. Please note that remote employment in this role is restricted to candidates residing in states where Great Gray is currently registered as an employer. Visa sponsorship or transfer of an existing visa is not available for this position. Applicants must be authorized to work directly for any employer in the United States without visa sponsorship or transfer.
Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
Ensure compliance with relevant regulatory requirements and security frameworks (SOC 2, NIST, industry-specific standards, etc.)
Prepare for and manage compliance audits, assessments, and regulatory reviews
Maintain security documentation, evidence, and audit trails for compliance purposes
Develop, maintain, and enforce information security policies and procedures
Vendor Risk Management security assessments, onboarding, and reviews.
Mentor and support the Information Security Analysts in both analyst and GRC functions
Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications
Participate in incident response activities and conduct post-incident analysis
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
5-10+ years of audit, compliance, or technical experience.
Excellent knowledge of IT security control trends as well as auditing & compliance best practices.
Effective communication skills (written and verbal) to properly articulate complicated IT controls and compliance issues to leadership and partners.
Positive attitude and a strong commitment to delivering quality work.
Relevant training and/or industry certifications in auditing, compliance, or IT security.
Ability to thrive in a fast-paced, dynamic environment and manage multiple priorities effectively.
Individual compensation within this range, or that may warrant a provision for pay beyond this range, depends on multiple factors, including, but not limited to, candidate’s prior education and relevant work experience and training as well as position location and local market demands. Our pay-for-performance culture also includes participation in an annual incentive bonus plan for this position which is not included in the ‘Base Pay Range’ noted above.
\Group medical, dental and vision insurance
· Employer-paid life and disability insurance
· Eligible employees may also contribute to a 401(k) plan with an advantageous employer contribution model, upholding our mission to support our employees in retirement
Great Gray is the leading independent provider of trustee and administrative services to Collective Investment Trusts (“CITs”), with over $385 billion in CIT assets under management, across more than 1,045 funds. CITs are more than just an investment vehicle. They represent a forward-thinking approach to retirement planning. These tax-exempt, pooled investment vehicles are offered to employer-sponsored retirement plans, like 401(k)s. CITs are comparable to mutual funds, but, because they are tailored for the institutional retirement market, they can offer distinct advantages, including efficient administration and cost-effectiveness. Great Gray has consistently delivered year-over-year growth at an above market rate and is investing in the continued development of its core CIT business as well as complementary administrative services and technology solutions for the retirement market.
Investor Background
MDP is a leading private equity investment firm based in Chicago. Since MDP's formation in 1992, the firm has raised aggregate capital of over $37 billion and has completed over 160 platform investments across nine flagship funds. MDP invests across five dedicated industry verticals, including financial services, healthcare, technology and government services.
Equal Employment Opportunity Policy
Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status or other non-merit factor.
Great Gray is committed to ensuring individuals with disabilities and/or those who have special needs participate in the workforce and are afforded equal opportunity to apply and compete for jobs. If you would like to contact us regarding the accessibility of our website, need assistance completing the application process, or need to request an accommodation for any part of our application or interview process, please contact us at:
Reference: WJ-5392_15923822