Cybersecurity GRC Consultant - Risk, Audit & Compliance

Machine Learning Technologies, LLC; San Ramon (CA); On-site; USD 96,000 - 107,000; Full time

Job summary

Machine Learning Technologies, LLC in San Ramon, CA is seeking an experienced Cybersecurity GRC Consultant to support enterprise security governance, risk management, compliance, and audit initiatives. You will lead GRC activities with NIST CSF, ISO 27001, SOC 2, PCI DSS and COBIT; perform risk assessments, ITGC and control testing; manage audits and vendor risk; and document findings for stakeholders.

The role requires strong communication with stakeholders and adherence to security standards

Qualifications

• Strong experience in Governance, Risk & Compliance (GRC).
• Hands-on experience with NIST CSF, ISO 27001, SOC 2, PCI DSS and COBIT.
• Expertise in cybersecurity risk assessments, ITGC and security control testing.
• Experience managing internal/external audits and compliance assessments.
• Third-party/vendor risk management and remediation tracking.
• Experience with GRC tools such as ServiceNow GRC, RSA Archer, OneTrust, AuditBoard or MetricStream.
• Strong documentation, reporting and stakeholder management skills.

Responsibilities

• Strong experience in Governance, Risk & Compliance (GRC).
• Hands-on experience with NIST CSF, ISO 27001, SOC 2, PCI DSS and COBIT.
• Expertise in cybersecurity risk assessments, ITGC and security control testing.
• Experience managing internal/external audits and compliance assessments.
• Third-party/vendor risk management and remediation tracking.
• Experience with GRC tools such as ServiceNow GRC, RSA Archer, OneTrust, AuditBoard or MetricStream.
• Strong documentation, reporting and stakeholder management skills.

Skills

GRC

NIST CSF

ISO 27001

SOC 2

PCI DSS

COBIT

Risk assessments

Audit management

Vendor risk management

Documentation

Tools

ServiceNow GRC

RSA Archer

OneTrust

AuditBoard

MetricStream

Job description

Machine Learning Technologies, LLC in San Ramon, CA is seeking an experienced Cybersecurity GRC Consultant to support enterprise security governance, risk management, compliance, and audit initiatives. You will lead GRC activities with NIST CSF, ISO 27001, SOC 2, PCI DSS and COBIT; perform risk assessments, ITGC and control testing; manage audits and vendor risk; and document findings for stakeholders.

The role requires strong communication with stakeholders and adherence to security standards