Senior GRC Consultant - Fully Remote & Client-Facing

Scale Up Recruiting Partners; Wrocław; On-site; PLN 341,167 - 492,797; Full time

Job summary

Scale Up is representing a fast-growing U.S.-based cybersecurity and compliance consulting startup seeking a Senior GRC Consultant. You will lead audit readiness, compliance program development, and risk management across client engagements, owning end-to-end processes from scoping to evidence collection, gap analysis, remediation guidance, and audit support.

This senior, client-facing role involves independently managing engagements, while coordinating with executive stakeholders and external

Qualifications

• 5–7+ years of hands‑on experience in GRC, compliance, or information security audits.
• Previous consulting or professional services experience managing multiple client engagements.
• Strong expertise with SOC 2 Type I & II and ISO 27001/ISO 27002.
• Experience with GDPR/CCPA/CPRA or HIPAA.
• Experience building compliance programs from the ground up.
• Ability to map controls across multiple frameworks.
• Excellent documentation and technical writing skills.
• Professional-level English with confidence leading meetings with U.S.-based clients.

Responsibilities

• Lead compliance readiness engagements including SOC 2 Type I/II, ISO 27001, HIPAA, GDPR compliance.
• Own GRC platforms such as Vanta, Drata, ensuring continuous evidence collection.
• Conduct risk assessments using NIST 800-30 and translate findings into business risk.
• Design and implement complete GRC programs including policies and controls.
• Perform internal audits and prepare audit-ready findings.
• Manage vendor security questionnaires and coordinate with SMEs.
• Lead meetings with client leadership and manage expectations.
• Produce client deliverables such as policies, risk registers, and reports.

Skills

GRC expertise

Audit readiness

Regulatory frameworks

Project management

Technical writing

Tools

Vanta

Drata

Job description

Scale Up is representing a fast-growing U.S.-based cybersecurity and compliance consulting startup seeking a Senior GRC Consultant. You will lead audit readiness, compliance program development, and risk management across client engagements, owning end-to-end processes from scoping to evidence collection, gap analysis, remediation guidance, and audit support.

This senior, client-facing role involves independently managing engagements, while coordinating with executive stakeholders and external