Senior Information Security Analyst

Why Great Gray?

At Great Gray Group, we strive to set the bar for the retirement services industry. Our goal is to deliver advanced retirement solutions that combine our core fiduciary services with robust investment options, innovative technology, and dedicated client service. We focus on making choices clearer, transitions smoother, and the client experience more delightful. Complacency isn't in our vocabulary. Every day, we look for opportunities to better serve our clients, be an excellent business partner, and earn the trust of those who rely on us. The Role

Great Gray is looking to add a Senior Information Security Analyst on our Information Security Team. The role will support IT governance, risk assessment, and security compliance functions and will be involved in monitoring and maintaining elements of overall IT governance, enterprise risk management, and compliance with regulations and control frameworks such as SOC2, CIS18, and NIST CSF. The analyst will focus on facilitating the review, development, implementation, and documentation supporting the ISMS policies, processes, procedures, and practices.

Location

This position will work from our Boston, MA or Wilmington, DE offices. Great Gray currently supports a hybrid work model with 4 days onsite, and 1 day remote.

Visa sponsorship or transfer of an existing visa is not available for this position. Applicants must be authorized to work directly for any employer in the United States without visa sponsorship or transfer.

Responsibilities

• IT governance & oversight, risk assessment, and security awareness.
• Internal auditing & evidence collection for IT controls compliance (PCI, SOX) and cybersecurity ISMS frameworks (SOC2)
• Vendor Risk Management assessment, onboarding, and reviews.
• Business Impact Analysis (BIA), and Sensitive Data Reviews (SDR).
• User Rights Management (URM) and Privileged Access Management (PAM) reviews for critical applicati