Remote Senior GRC Consultant - Lead Compliance Programs

Scale Up Recruiting Partners; Sur; Presencial; COP 300.812.193 - 434.506.501; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Long-term remote work

Descripción de la vacante

Scale Up is seeking a Senior GRC Consultant for a long-term, 100% remote engagement with U.S.-based clients. You will lead audit readiness, develop compliance programs, and manage risk across multiple client engagements.

This senior, client-facing role requires owning engagements end-to-end, from scoping and evidence collection to remediation guidance and audit support. Strong English and documentation skills are essential.

Formación

• 5–7+ years of hands-on experience in GRC, compliance, or information security audits.
• Consulting or professional services experience managing multiple client engagements.
• Experience with SOC 2 Type I & II and ISO 27001.
• Experience with GDPR, CCPA/CPRA, or HIPAA.
• Experience building compliance programs from the ground up.
• Ability to map controls across multiple frameworks.
• Cloud security, IAM, CI/CD pipelines, and security controls knowledge.
• Excellent documentation and technical writing skills.
• Professional English with confidence leading meetings with U.S.-based clients.

Responsabilidades

• Lead compliance readiness engagements including SOC 2 Type I/II, ISO 27001, HIPAA, U.S. state privacy regulations, and UK/EU GDPR.
• Own GRC platforms such as Vanta, Drata, or similar tools, ensuring compliance monitoring remains fully operational and evidence is continuously maintained.
• Conduct formal risk assessments using frameworks such as NIST 800‑30, translating technical findings into business and compliance risks.
• Design and implement complete GRC programs, including policies, control frameworks, risk management processes, and evidence collection.
• Perform internal audits, evaluating both control design and operational effectiveness while preparing audit-ready findings.
• Manage vendor security questionnaires, coordinating with internal subject matter experts and maintaining reusable knowledge bases.
• Build strong relationships with client leadership, lead recurring meetings, provide status updates, and manage expectations throughout each engagement.
• Produce high-quality client deliverables including policies, procedures, risk registers, control matrices, evidence packages, and assessment reports.

Conocimientos

GRC

Audit readiness

Risk management

Policy development

Vendor management

Technical writing

Herramientas

Vanta

Drata

Descripción del empleo

Scale Up is seeking a Senior GRC Consultant for a long-term, 100% remote engagement with U.S.-based clients. You will lead audit readiness, develop compliance programs, and manage risk across multiple client engagements.

This senior, client-facing role requires owning engagements end-to-end, from scoping and evidence collection to remediation guidance and audit support. Strong English and documentation skills are essential.