GRC Specialist: Cybersecurity Governance & Compliance (Hybrid/Remote)

Beacon Hill Staffing Group, LLC; Boise (ID); Hybrid; USD 70,000 - 90,000; Full time

Job summary

Beacon Hill Staffing Group is seeking a Governance, Risk & Compliance (GRC) Specialist to support a large-scale information security program in a hybrid work model. The candidate will help build and mature the security governance program across IT, cloud, and OT environments while partnering with multiple stakeholders.

Ideal candidates have 3+ years of GRC-related experience, strong knowledge of major frameworks, and excellent documentation and communication skills.

Qualifications

• 3+ years of experience in Governance, Risk & Compliance (GRC), cybersecurity compliance, IT audit, information security, or related disciplines.
• Strong knowledge of NIST CSF, NIST 800-53, NIST 800-171, ISO 27001, SOC 2, CIS Controls.
• Experience supporting audits, evidence collection, control testing, remediation tracking, and compliance reporting.
• Ability to develop and maintain security policies, standards, procedures, and control documentation.
• Experience conducting risk assessments, gap assessments, and control reviews.
• Familiarity with third-party and vendor risk management processes.
• Strong documentation and communication skills; ability to translate technical concepts into business language.
• Knowledge of enterprise security controls including IAM, vulnerability management, incident response, and change management.

Responsibilities

• Support and maintain the governance, risk, and compliance program across IT, cloud, and OT environments.
• Develop, review, and maintain security policies, standards, procedures, and control documentation.
• Coordinate audit evidence collection for internal and external audits and customer assessments.
• Track audit findings, remediation plans, control deficiencies, policy exceptions, and risk acceptance activities.
• Perform control testing and compliance validation to ensure security controls are effective.
• Assist with risk assessments, gap assessments, and control maturity reviews.
• Support vendor and third-party risk management activities, including security questionnaires and risk reviews.
• Collaborate with IT, Security Operations, Infrastructure, Engineering, Legal, Procurement, Compliance, and Operations teams.

Skills

GRC experience

Documentation

Communication

Tools

ServiceNow GRC

Archer

OneTrust

AuditBoard

LogicGate

Drata

Vanta

Job description

Beacon Hill Staffing Group is seeking a Governance, Risk & Compliance (GRC) Specialist to support a large-scale information security program in a hybrid work model. The candidate will help build and mature the security governance program across IT, cloud, and OT environments while partnering with multiple stakeholders.

Ideal candidates have 3+ years of GRC-related experience, strong knowledge of major frameworks, and excellent documentation and communication skills.