Senior GRC Consultant — Lead Compliance Programs (Remote)

Scale Up Recruiting Partners; Ecatepec de Morelos; Presencial; MXN 1.525.000 - 2.542.000; Jornada completa

Descripción de la vacante

Scale Up Recruiting Partners is seeking a Senior GRC Consultant for a 100% remote, long-term contractor role. You will lead audit readiness, design comprehensive GRC programs, and manage end-to-end risk and compliance engagements across multiple client projects.

You will work directly with executive stakeholders and auditors, applying frameworks like SOC 2, ISO 27001, HIPAA, and GDPR to build robust compliance programs for fast-growing startups.

Formación

• 5-7+ years of hands-on experience in GRC, compliance, or information security audits.

Responsabilidades

• Lead audit readiness engagements including SOC 2 Type I/II, ISO 27001, HIPAA, GDPR-related requirements.
• Own GRC platforms like Vanta or Drata, ensuring continuous evidence collection and monitoring.
• Conduct formal risk assessments using NIST 800-53 and translate findings into risk-based actions.
• Design and implement complete GRC programs with policies, controls, and evidence.
• Perform internal audits and prepare audit-ready findings and reports.
• Coordinate vendor security questionnaires and maintain knowledge bases.
• Engage with client leadership, lead meetings, and manage expectations.
• Produce deliverables such as policies, risk registers, control matrices, and evidence packages.

Conocimientos

GRC

Audit readiness

ISO 27001

SOC 2

HIPAA

NIST 800-53

Cloud security

Documentation

Client management

English communication

Herramientas

Vanta

Drata

Descripción del empleo

Scale Up Recruiting Partners is seeking a Senior GRC Consultant for a 100% remote, long-term contractor role. You will lead audit readiness, design comprehensive GRC programs, and manage end-to-end risk and compliance engagements across multiple client projects.

You will work directly with executive stakeholders and auditors, applying frameworks like SOC 2, ISO 27001, HIPAA, and GDPR to build robust compliance programs for fast-growing startups.