Senior GRC Consultant - Contract

📋 Description

• Own delivery for standard-framework engagements: ISO 27001 (implementation & surveillance), SOC
• Run multiple concurrent client engagements to a consistent quality bar without close supervision.
• Maintain and evolve templates, control-mapping libraries, workshop agendas, and QA rubrics for
• Extend the library opportunistically to adjacent frameworks (HIPAA, PCI DSS, ISO 42001) as demand
• Define pricing/packaging for standard-framework engagements (fixed-fee tiers, retainer options).
• Own utilization, margin, and delivery forecasting for your own engagement book.

🎯 Requirements

• 5+ years in GRC/security consulting or in-house compliance program ownership.
• Hands-on delivery track record across ISO 27001, SOC 2, and GDPR at minimum.
• Comfortable running several concurrent client engagements.
• Deep domain mastery: ISO 27001, SOC 2 Type I/II, GDPR.
• Working knowledge (nice to have): PCI DSS, HIPAA, ISO 42001 etc.
• Demonstrated use of AI tools to reduce manual effort and standardize deliverables.