GRC Consultant

We are seeking a skilled and knowledgeable GRC Consultant to help organizations design, implement, and manage governance, risk management, and compliance frameworks. You will work closely with cross-functional teams to ensure compliance with relevant regulations and standards, reduce risk exposure, and support business continuity.

• Assess and implement GRC frameworks aligned with industry standards (e.g., ISO 27001, NIST, COBIT, SOC 2, GDPR).
• Conduct risk assessments, gap analyses, and compliance audits.
• Develop and document policies, procedures, and controls for IT and business processes.
• Advise on regulatory compliance issues such as data privacy, cybersecurity, SOX, HIPAA, etc.
• Provide recommendations to mitigate identified risks and support remediation efforts.
• Collaborate with internal stakeholders to implement compliance and risk mitigation plans.
• Monitor and report on GRC program effectiveness and maturity.
• Assist with the selection and configuration of GRC tools or platforms (e.g., RSA Archer, ServiceNow GRC, MetricStream).
• Deliver training and awareness programs to ensure organizational understanding of GRC practices.

• Bachelor's degree in Information Security, Business, IT, or related field.
• 3+ years of experience in GRC, risk management, compliance, or related field.
• Strong understanding of regulatory and standards frameworks (e.g., ISO 27001, NIST, PCI-DSS, SOX, GDPR, HIPAA).
• Familiarity with risk assessment methodologies and control frameworks.
• Excellent communication, presentation, and stakeholder engagement skills.
• Experience with GRC platforms/tools is a plus.
• Relevant certifications preferred (e.g., CISA, CRISC, CISSP, CGEIT, ISO 27001 Lead Implementer/Auditor).

• Knowledge of cloud compliance and governance (AWS, Azure, GCP).
• Experience working with cross-functional teams including IT, audit, and legal.
• Project management experience or certification (e.g., PMP, PRINCE2) is a plus.