GRC Specialist: Build Security Governance for IT/OT

Beacon Hill Staffing Group, LLC; Little Rock (AR); Hybrid; USD 110,000 - 150,000; Part time

Benefits offered by this job

Medical

Dental

Vision

Federal leave programs

State leave programs

Job summary

Beacon Hill Staffing Group, LLC is seeking a Governance, Risk & Compliance (GRC) Specialist to join a growing Information Security team. You will help build and mature governance, risk management, compliance, and cybersecurity processes across IT, cloud, and OT environments, partnering with security, engineering, legal, procurement, and business stakeholders.

This 6-month contract offers extension potential, with options for hybrid (Houston) or remote work (Chicago).

Qualifications

• 3+ years of experience in Governance, Risk & Compliance (GRC), cybersecurity compliance, IT audit, information security, or related disciplines.
• Strong knowledge of NIST CSF, NIST 800-53, NIST 800-171, ISO 27001, SOC 2, CIS Controls.
• Experience supporting audits, evidence collection, control testing, remediation tracking, and compliance reporting.
• Ability to develop and maintain security policies, standards, procedures, and control documentation.
• Experience conducting risk assessments, gap assessments, and control reviews.
• Familiarity with third-party and vendor risk management processes.
• Strong documentation and communication skills with the ability to translate technical concepts into business-friendly language.
• Experience working with cross-functional teams across technology and business organizations.
• Knowledge of enterprise security controls including identity and access management, vulnerability management, incident response, and change management.
• Strong organizational skills and ability to manage multiple initiatives simultaneously.

Responsibilities

• Support and maintain the organization's governance, risk, and compliance program across IT, cloud, and OT environments.
• Develop, review, and maintain security policies, standards, procedures, and control documentation.
• Coordinate audit evidence collection for internal audits, external audits, compliance reviews, and customer assessments.
• Track audit findings, remediation plans, control deficiencies, policy exceptions, and risk acceptance activities.
• Perform control testing and compliance validation to ensure security controls are operating effectively.
• Assist with risk assessments, gap assessments, compliance readiness activities, and control maturity reviews.
• Support vendor and third-party risk management activities, including security questionnaires and risk reviews.
• Collaborate with IT, Security Operations, Infrastructure, Engineering, Legal, Procurement, Compliance, and Operations teams.
• Map security controls to frameworks including NIST, ISO 27001, SOC 2, and CIS Controls.
• Maintain risk registers, compliance calendars, control inventories, and audit repositories.
• Prepare compliance reports, dashboards, scorecards, and presentations for leadership.

Skills

GRC experience

Cybersecurity compliance

Audit support

Policy development

Vendor risk management

Documentation skills

Cross-functional collaboration

NIST CSF

ISO 27001

SOC 2

CIS Controls

Tools

ServiceNow GRC

Archer

OneTrust

AuditBoard

LogicGate

Drata

Vanta

Job description

Beacon Hill Staffing Group, LLC is seeking a Governance, Risk & Compliance (GRC) Specialist to join a growing Information Security team. You will help build and mature governance, risk management, compliance, and cybersecurity processes across IT, cloud, and OT environments, partnering with security, engineering, legal, procurement, and business stakeholders.

This 6-month contract offers extension potential, with options for hybrid (Houston) or remote work (Chicago).