Senior GRC Consultant - Remote, Lead Compliance Programs

SCALEUP; Kraków; On-site; PLN 447,000 - 670,000; Full time

Job summary

Scale Up seeks a Senior GRC Consultant to lead audit readiness, develop compliance programs, and manage risk across multiple client engagements. You will own end-to-end compliance efforts—from scoping and evidence collection to remediation guidance and audit support—working as a senior, client-facing advisor.

This long-term contract role is 100% remote with U.S. business-hour alignment and direct collaboration with executive stakeholders and external auditors.

Qualifications

• 5–7+ years in GRC, compliance, or information security audits.
• Consulting or professional services experience handling multiple client engagements.
• Experience with SOC 2 Type I & II and ISO 27001/27002.
• Experience with GDPR/CCPA/CPRA or HIPAA.
• Ability to map controls across multiple frameworks.

Responsibilities

• Lead audit readiness engagements (SOC 2 Type I/II, ISO 27001, HIPAA, GDPR).
• Own GRC platforms (Vanta, Drata) and maintain continuous evidence collection.
• Conduct risk assessments using NIST 800-30; translate findings into business risks.
• Design and implement complete GRC programs with policies and controls.
• Prepare audit-ready findings and manage vendor security questionnaires.
• Build relationships with client leadership and manage engagement meetings.
• Produce high-quality deliverables (policies, risk registers, control matrices).

Skills

GRC

Audit readiness

Policy development

Documentation

Client-facing

Cloud security

Security controls

Tools

Vanta

Drata

Job description

Scale Up seeks a Senior GRC Consultant to lead audit readiness, develop compliance programs, and manage risk across multiple client engagements. You will own end-to-end compliance efforts—from scoping and evidence collection to remediation guidance and audit support—working as a senior, client-facing advisor.

This long-term contract role is 100% remote with U.S. business-hour alignment and direct collaboration with executive stakeholders and external auditors.