GRC Consultant

Overview

In this role you’ll lead governance, risk and compliance initiatives for clients, guiding audits, risk assessments and policy development. You’ll drive improvements in security governance, ensuring alignment with standards such as ISO27001 and NIST. You will mentor junior colleagues and partner with stakeholders to translate complex compliance requirements into actionable programs. This position offers meaningful impact by shaping robust risk controls in a regulated environment.

Responsibilities

• Conduct internal and external audits with focus on ISO27001 compliance
• Perform risk assessments and develop risk management strategies
• Create and maintain information security policies
• Lead governance activities, reporting and process improvements
• Support and develop junior team members

Key requirements

• Five+ years in a lead GRC compliance or technical security role (including policy/documentation reviews and auditing)
• Proven track record in maintaining information security standards (ISO27001, NIST)
• Compliance or information security-related certification
• Strong desire to grow and mentor juniors
• Excellent written and verbal communication for external stakeholders
• Ability to analyze data, identify issues, and develop practical solutions
• Planning, prioritization and time management skills
• Attention to detail

• excellent written and oral communication
• mentoring and team development
• strong attention to detail
• ISO27001
• NIST
• risk assessment

…