Risk & Compliance
GRC Consultant
Help clients achieve and maintain SOC 2, ISO 27001, NIST CSF and sector compliance with practical, evidence-ready control programs.
- Remote (US)
- Full time
- Posted November 2, 2026
What you will do
- Run gap assessments and map controls to multiple frameworks
- Draft policies, procedures and risk registers tailored to each client
- Guide clients through evidence collection and auditor walkthroughs
- Perform third-party risk reviews and report findings
- Support virtual CISO engagements with reporting and program tracking
- Translate technical findings into business risk language
What you bring
- 3+ years in governance, risk, compliance or audit roles
- Working knowledge of SOC 2, ISO 27001 and NIST CSF
- Strong writing and facilitation skills
- Ability to manage multiple client engagements
- CISA, CISM, CRISC, ISO 27001 Lead Implementer or equivalent preferred
Nice to have
- Experience with HIPAA or PCI DSS
- Familiarity with GRC automation platforms
- Prior consulting experience