Senior GRC Consultant - Remote: Lead Compliance Programs

Scale Up Recruiting Partners; Wrocław; On-site; PLN 410,000 - 596,000; Full time

Job summary

Scale Up Recruiting Partners, recruiting for a fast‑growing cybersecurity client, seeks a Senior GRC Consultant for full‑time remote engagement. You will lead audit readiness, develop compliance programs, and manage risk across multiple client engagements.

You will independently own engagements, work with executive stakeholders, and coordinate with external auditors to deliver evidence, policies, and risk documents.

Qualifications

• 5–7+ years of hands‑on GRC, compliance, or security audits.
• Experience in consulting or professional services managing multiple client engagements.
• Expertise with SOC 2 Type I & II and ISO 27001/27002.
• Knowledge of GDPR, CCPA/CPRA, or HIPAA is a plus.
• Ability to map controls across multiple frameworks.
• Strong written and verbal communication in English.

Responsibilities

• Lead audit readiness engagements including SOC 2 Type I/II, ISO 27001, HIPAA, GDPR, and privacy regulations.
• Own GRC platforms (Vanta/Drata) and ensure continuous evidence collection and monitoring.
• Conduct risk assessments using NIST 800-30 and translate findings into business impact.
• Design and implement end‑to‑end GRC programs, policies, and control matrices.
• Perform internal audits and prepare audit‑ready findings.
• Coordinate with internal SMEs and external auditors; manage vendor questionnaires.
• Lead client meetings, provide progress updates, and manage expectations.
• Deliver high‑quality client deliverables such as policies and risk registers.

Skills

GRC

Compliance

Audit readiness

Client management

Documentation

English proficiency

Cloud security

Tools

Vanta

Drata

Job description

Scale Up Recruiting Partners, recruiting for a fast‑growing cybersecurity client, seeks a Senior GRC Consultant for full‑time remote engagement. You will lead audit readiness, develop compliance programs, and manage risk across multiple client engagements.

You will independently own engagements, work with executive stakeholders, and coordinate with external auditors to deliver evidence, policies, and risk documents.