GRC Specialist: Critical Infrastructure & Compliance

Beacon Hill Staffing Group, LLC; Montgomery (AL); Hybrid; USD 70,000 - 110,000; Part time

Job summary

Beacon Hill Staffing Group, LLC is seeking a Governance, Risk & Compliance (GRC) Specialist to join a growing information security team. The role strengthens governance, risk management, compliance, and cybersecurity across IT, cloud, and OT environments.

This 6-month contract offers strong extension potential with hybrid Houston, TX or remote Chicago, IL options. Start date is ~3 weeks from offer, and the specialist will help mature a comprehensive GRC program with diverse stakeholders.

Qualifications

• 3+ years in Governance, Risk & Compliance (GRC), cybersecurity compliance, IT audit, information security, or related disciplines.
• Strong knowledge of NIST Cybersecurity Framework (CSF), NIST 800-53, NIST 800-171, ISO 27001, SOC 2, CIS Controls.
• Experience supporting audits, evidence collection, control testing, remediation tracking, and compliance reporting.
• Ability to develop and maintain security policies, standards, procedures, and control documentation.
• Experience conducting risk assessments, gap assessments, and control reviews.
• Familiarity with third-party and vendor risk management processes.
• Strong documentation and communication skills with the ability to translate technical concepts into business-friendly language.
• Experience working with cross-functional teams across technology and business organizations.

Responsibilities

• Support and maintain the organization's governance, risk, and compliance program across IT, cloud, and OT environments.
• Develop, review, and maintain security policies, standards, procedures, and control documentation.
• Coordinate audit evidence collection for internal audits, external audits, compliance reviews, and customer assessments.
• Track audit findings, remediation plans, control deficiencies, policy exceptions, and risk acceptance activities.
• Perform control testing and compliance validation to ensure security controls are operating effectively.
• Assist with risk assessments, gap assessments, compliance readiness activities, and control maturity reviews.
• Support vendor and third-party risk management activities, including security questionnaires and risk reviews.
• Collaborate with IT, Security Operations, Infrastructure, Engineering, Legal, Procurement, Compliance, and Operations teams.
• Map security controls to frameworks including NIST, ISO 27001, SOC 2, and CIS Controls.
• Maintain risk registers, compliance calendars, control inventories, and audit repositories.
• Prepare compliance reports, dashboards, scorecards, and presentations for leadership.
• Monitor remediation efforts and work with control owners to ensure timely issue resolution.
• Support continuous improvement initiatives across the information security governance program.
• Stay informed on cybersecurity regulations, compliance trends, and industry best practices.

Skills

GRC experience

NIST CSF

NIST 800-53

NIST 800-171

ISO 27001

SOC 2

CIS Controls

Audit support

Policy development

Vendor risk management

Cross-functional collaboration

Tools

ServiceNow GRC

Archer

OneTrust

AuditBoard

LogicGate

Drata

Vanta

Job description

Beacon Hill Staffing Group, LLC is seeking a Governance, Risk & Compliance (GRC) Specialist to join a growing information security team. The role strengthens governance, risk management, compliance, and cybersecurity across IT, cloud, and OT environments.

This 6-month contract offers strong extension potential with hybrid Houston, TX or remote Chicago, IL options. Start date is ~3 weeks from offer, and the specialist will help mature a comprehensive GRC program with diverse stakeholders.