GRC (Governance, Risk, and Compliance) Consultant

About the role

We are seeking an experienced GRC Consultant to design, evaluate, and monitor our corporate cybersecurity governance frameworks and risk management strategies. The ideal candidate will translate complex regulatory frameworks into actionable policy layers, lead enterprise risk assessments, manage third-party vendor audits, and ensure continuous compliance across complex digital landscapes.

What you'll do

• Design and maintain corporate security governance frameworks , writing information security policies, procedural standards
• Lead comprehensive enterprise risk assessments , identifying infrastructure vulnerabilities, evaluating operational impacts, mapping threat probabilities
• Manage internal control validation audits , testing control effectiveness across identity management systems, change configuration lines, asset trackers
• Facilitate security awareness programs and compliance training drives , building materials to educate workforce divisions on corporate data protection responsibilities…
• Coordinate directly with internal executive stakeholders and external auditors , assembling compliance evidence evidence packages, documenting control gaps

What you need

• Compliance
• Data privacy
• CISA
• CISM
• ServiceNow
• ISO 27001

Good to have

• CISSP
• Internal controls