GRC Specialist for IT, Cloud & OT (Hybrid/Remote)

Beacon Hill Staffing Group, LLC; Oklahoma City (OK); Hybrid; USD 90,000 - 130,000; Part time

Benefits offered by this job

Medical

Dental

Vision

Federal leave programs

State leave programs

Job summary

Beacon Hill Staffing Group, LLC is seeking a Governance, Risk & Compliance (GRC) Specialist to join a growing Information Security team. The role supports governance, risk management, compliance, and cybersecurity across IT, cloud, and OT environments, partnering across security, engineering, legal, procurement, and business stakeholders.

The position involves building and maturing a cybersecurity governance program from the ground up with high visibility.

Qualifications

• 3+ years in Governance, Risk & Compliance, cybersecurity compliance, IT audit, or related disciplines.
• Knowledge of NIST CSF, NIST 800-53, NIST 800-171, ISO 27001, SOC 2, CIS Controls.
• Experience supporting audits, evidence collection, control testing, remediation tracking, and compliance reporting.
• Strong documentation and communication skills with ability to translate technical concepts for business stakeholders.

Responsibilities

• Support and maintain the organization's GRC program across IT, cloud, and OT environments.
• Develop and maintain security policies, standards, procedures, and control documentation.
• Coordinate audit evidence collection for internal/external audits and customer assessments.
• Track audit findings, remediation plans, control deficiencies, policy exceptions, and risk acceptance activities.
• Perform control testing and compliance validation to ensure security controls operate effectively.
• Assist with risk assessments, gap assessments, and control maturity reviews.
• Support third-party risk management activities, including security questionnaires and risk reviews.
• Collaborate with IT, Security Operations, Infrastructure, Engineering, Legal, Procurement, Compliance, and Operations teams.
• Map security controls to frameworks including NIST, ISO 27001, SOC 2, CIS Controls.
• Maintain risk registers, compliance calendars, control inventories, and audit repositories.
• Prepare compliance reports, dashboards, scorecards, and leadership presentations.
• Monitor remediation efforts and work with control owners to ensure timely issue resolution.
• Support continuous improvement initiatives across the information security governance program.
• Stay informed on cybersecurity regulations, compliance trends, and industry best practices.

Skills

GRC governance

NIST CSF

Audits & compliance

Policy development

Vendor risk management

Cross-functional collaboration

Job description

Beacon Hill Staffing Group, LLC is seeking a Governance, Risk & Compliance (GRC) Specialist to join a growing Information Security team. The role supports governance, risk management, compliance, and cybersecurity across IT, cloud, and OT environments, partnering across security, engineering, legal, procurement, and business stakeholders.

The position involves building and maturing a cybersecurity governance program from the ground up with high visibility.