Cybersecurity GRC Professional

duvari group; United States; On-site; USD 120,000 - 190,000; Full time

Job summary

duvari group is seeking a Senior GRC Security Consultant to support government and commercial clients through security assessments, audit readiness, and compliance initiatives.

You will lead GRC engagements, prepare for SOC 2, ISO 27001, CMMC, NIST CSF 2.0, HIPAA, and other frameworks, conduct risk assessments, develop policies, and guide audit readiness with stakeholders.

Qualifications

• Strong background in GRC and information security.
• Experience with SOC 2, ISO 27001, CMMC, NIST CSF, or HIPAA.
• Ability to translate security requirements into actionable solutions.
• Excellent client-facing communication and consulting skills.

Responsibilities

• Lead governance, risk, and compliance (GRC) engagements.
• Prepare organizations for SOC 2, ISO 27001, CMMC, NIST CSF 2.0, HIPAA, and other regulatory frameworks.
• Conduct risk assessments, gap analyses, and compliance reviews.
• Develop security policies, standards, and remediation roadmaps.
• Guide clients through audit readiness and certification efforts.
• Partner with executive and technical teams to implement security best practices.

Skills

GRC expertise

Risk assessment

Security policies

Client consultation

Job description

Are you a GRC expert who enjoys helping organizations strengthen their security posture and achieve compliance? We're seeking experienced Senior GRC Security Consultants to support government and commercial clients through security assessments, audit readiness, and compliance initiatives.

What You'll Do

• Lead governance, risk, and compliance (GRC) engagements.
• Prepare organizations for SOC 2, ISO 27001, CMMC, NIST CSF 2.0, HIPAA, and other regulatory frameworks.
• Conduct risk assessments, gap analyses, and compliance reviews.
• Develop security policies, standards, and remediation roadmaps.
• Guide clients through audit readiness and certification efforts.
• Partner with executive and technical teams to implement security best practices.

What We're Looking For

• Strong background in Governance, Risk & Compliance (GRC) and information security.
• Experience with one or more compliance frameworks, including SOC 2, ISO 27001, CMMC, NIST CSF, or HIPAA.
• Ability to translate security requirements into practical, actionable solutions.
• Excellent client-facing communication and consulting skills.
• Experience supporting regulated industries (government, healthcare, defense, financial services, etc.) is a plus.

Why Join?

• Long-term consulting engagements.
• Work with a variety of clients and industries.
• Make a direct impact on security and compliance programs.
• Collaborative, flexible consulting environment.