Remote Senior GRC Consultant: Lead Compliance Programs

Scale Up Recruiting Partners; None; In loco; EUR 122.570 - 183.855; Tempo pieno

Descrizione del lavoro

Scale Up is seeking a Senior GRC Consultant to lead audit readiness, program development, and risk management for multiple client engagements. You will own end-to-end compliance initiatives, from scoping and evidence collection to remediation guidance and audit support.

In this senior, client-facing role, you will independently manage engagements while collaborating with executive stakeholders and external auditors to mature security programs for startups.

Competenze

• 5–7+ years of hands-on experience in GRC, compliance, or information security audits.
• Previous consulting or professional services experience managing multiple client engagements.
• Strong expertise with SOC 2 Type I & II and ISO 27001/27002.

Mansioni

• Lead compliance readiness engagements including SOC 2 Type I/II, ISO 27001, HIPAA, GDPR and other privacy regulations.
• Own GRC platforms such as Vanta, Drata, or similar tools, ensuring continuous evidence and monitoring.
• Conduct formal risk assessments using frameworks like NIST 800-30 and translate findings into business risks.
• Design and implement complete GRC programs with policies, controls, and evidence collection.
• Perform internal audits and prepare audit-ready findings across engagements.
• Manage vendor security questionnaires and coordinate with internal SMEs to build reusable knowledge bases.
• Build relationships with client leadership, run recurring meetings, and manage stakeholder expectations.
• Deliver high-quality client artifacts including policies, risk registers, control matrices, evidence packages.

Conoscenze

GRC experience

Client-facing

English proficiency

Strumenti

Vanta

Drata

Descrizione del lavoro

Scale Up is seeking a Senior GRC Consultant to lead audit readiness, program development, and risk management for multiple client engagements. You will own end-to-end compliance initiatives, from scoping and evidence collection to remediation guidance and audit support.

In this senior, client-facing role, you will independently manage engagements while collaborating with executive stakeholders and external auditors to mature security programs for startups.