GRC Specialist - Critical Infrastructure Compliance (Hybrid)

Beacon Hill Staffing Group, LLC; Honolulu (HI); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Leave programs

Job summary

Beacon Hill Staffing Group, LLC is actively seeking a Governance, Risk & Compliance (GRC) Specialist to join our information security program within a critical infrastructure context.

You will help mature governance, risk management, and compliance across IT, cloud, and OT, collaborating with security, engineering, legal, procurement, and business teams to strengthen controls and reporting.

Qualifications

• 3+ years in Governance, Risk & Compliance or related disciplines.
• Knowledge of NIST CSF, NIST 800-53, NIST 800-171, ISO 27001, SOC 2, CIS Controls.
• Experience supporting audits, evidence collection, control testing, and compliance reporting.
• Ability to develop and maintain security policies, standards, and control documentation.
• Experience with risk assessments, gap assessments, and control reviews.
• Familiarity with third-party and vendor risk management processes.
• Strong documentation and communication skills, with ability to translate technical concepts to business audiences.
• Experience working with cross-functional teams across technology and business units.

Responsibilities

• Support and maintain the GRC program across IT, cloud, and OT environments.
• Develop, review, and maintain security policies, standards, and control documentation.
• Coordinate audit evidence collection for internal and external audits and customer assessments.
• Track audit findings, remediation plans, control deficiencies, policy exceptions, and risk acceptance.
• Perform control testing and compliance validation to ensure security controls operate effectively.
• Assist with risk assessments, gap assessments, and control maturity reviews.
• Support vendor and third-party risk management activities, including risk reviews.
• Collaborate with IT, Security Operations, Infrastructure, Legal, Procurement, Compliance, and Operations teams.
• Map security controls to frameworks (NIST, ISO 27001, SOC 2, CIS).
• Maintain risk registers, compliance calendars, control inventories, and audit repositories.
• Prepare compliance reports, dashboards, and leadership presentations.

Skills

GRC

Policy development

Risk assessment

Audit & controls

Vendor risk management

Documentation

Cross-functional collaboration

Cybersecurity

Tools

ServiceNow GRC

Archer

OneTrust

AuditBoard

LogicGate

Drata

Vanta

Job description

Beacon Hill Staffing Group, LLC is actively seeking a Governance, Risk & Compliance (GRC) Specialist to join our information security program within a critical infrastructure context.

You will help mature governance, risk management, and compliance across IT, cloud, and OT, collaborating with security, engineering, legal, procurement, and business teams to strengthen controls and reporting.