Cybersecurity Consultant

Ethereum Technologies; San Ramon (CA); On-site; USD 84,000 - 120,000; Full time

Job summary

Ethereum Technologies is seeking an experienced Cybersecurity GRC Consultant to support governance, risk management, compliance and audit initiatives for enterprise security.

You will apply frameworks such as NIST CSF, ISO 27001, SOC 2, PCI DSS and COBIT and work with GRC tools to document, report and track remediation across internal and external audits.

Qualifications

• Experience in governance, risk and compliance (GRC) for enterprise security programs.
• Proficient with NIST CSF, ISO 27001, SOC 2, PCI DSS and COBIT frameworks.
• Skilled in assessing cybersecurity risk, ITGC and security control testing.
• Experience managing internal and external audits and assessments.
• Knowledge of third‑party/vendor risk management and remediation tracking.

Responsibilities

• Support enterprise security governance, risk management, compliance and audit initiatives.
• Lead or participate in risk assessments and control testing.
• Manage internal/external audits and regulatory assessments.
• Coordinate third‑party/vendor risk reviews and remediation tracking.
• Utilize GRC tools (ServiceNow GRC, RSA Archer, OneTrust, AuditBoard, MetricStream) for documentation and reporting.

Skills

GRC

NIST CSF

ISO 27001

SOC 2

PCI DSS

COBIT

Audit management

Vendor risk

Documentation

Stakeholder mgmt

Tools

ServiceNow GRC

RSA Archer

OneTrust

AuditBoard

MetricStream

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Job Title: Cybersecurity Consultant

Location: San Ramon, California

Duration: 8 Months + Extension

Bill Rate: $74/hour (C2C)

Job Type: W-2, 1099, C2C

Client: To Be Discussed Later

Work Authorization: US Citizen, Green Card, H-1B, OPT-EAD, CPT, H4-EAD, Other

Job Description:

We are looking for an experienced Cybersecurity GRC Consultant to support enterprise security governance, risk management, compliance and audit initiatives.

Key Skills & Responsibilities:

• Strong experience in Governance, Risk & Compliance (GRC).
• Hands-on experience with NIST CSF, ISO 27001, SOC 2, PCI DSS and COBIT.
• Expertise in cybersecurity risk assessments, ITGC and security control testing.
• Experience managing internal/external audits and compliance assessments.
• Third-party/vendor risk management and remediation tracking.
• Experience with GRC tools such as ServiceNow GRC, RSA Archer, OneTrust, AuditBoard or MetricStream.
• Strong documentation, reporting and stakeholder management skills.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.