Senior GRC Consultant

📋 Description

• Lead end-to-end compliance readiness and implementation engagements covering SOC 2 Type I and II
• Manage and optimize GRC platforms such as Vanta, Drata, and similar tools, ensuring continuous
• Conduct formal risk assessments using methodologies such as NIST 800-30, translating technical
• Design, implement, and maintain comprehensive GRC programs, including security policies, control
• Perform internal audits and assess control design and operational effectiveness, identifying gaps
• Coordinate vendor security assessments and questionnaires, collaborating with internal subject

🎯 Requirements

• 5–7+ years of hands-on experience in Governance, Risk, and Compliance (GRC), regulatory compliance
• Previous experience in consulting or professional services, with the ability to independently
• Strong practical expertise in SOC 2 Type I and II and ISO 27001/ISO 27002 frameworks, including
• Experience working with additional regulatory or compliance frameworks, such as GDPR, CCPA/CPRA, or
• Proven ability to develop and implement compliance programs from the ground up and map controls
• Solid technical understanding of cloud security, identity and access management (IAM), CI/CD

🎁 Benefits

• Long-term independent contractor opportunity with a full-time workload.
• 100% remote work arrangement, offering flexibility to work from anywhere in United States.
• Opportunity to join an early-stage, fast-growing cybersecurity and compliance consulting
• Direct exposure to founders, executive stakeholders, and client leadership teams.
• Significant autonomy and ownership over high-impact client engagements from start to finish.
• Opportunity to work with innovative technology companies and help them strengthen and scale their