GRC Specialist: IT, Cloud & OT Risk & Compliance

Beacon Hill Staffing Group, LLC; Providence (RI); Hybrid; USD 90,000 - 130,000; Part time

Benefits offered by this job

Medical

Dental

Vision

Leave programs

Job summary

Beacon Hill Staffing Group, LLC seeks a Governance, Risk & Compliance (GRC) Specialist to strengthen governance, risk management, and compliance across IT, cloud, and OT environments. You will partner with security, engineering, legal, and procurement to mature the cybersecurity program from the ground up.

The role supports audits, policy development, and risk assessments, with opportunities to drive risk-based improvements and executive reporting in a dynamic Infrastructure setting.

Qualifications

• 3+ years of experience in Governance, Risk & Compliance (GRC) and cybersecurity.
• Strong knowledge of NIST CSF, NIST 800-53/800-171, ISO 27001, SOC 2, CIS Controls.
• Experience supporting audits, evidence collection, control testing, and reporting.
• Ability to write security policies, standards, procedures, and control documentation.
• Familiarity with third-party and vendor risk management.
• Excellent documentation and cross-functional collaboration skills.

Responsibilities

• Support and maintain the organization's governance, risk, and compliance program across IT, cloud, and OT environments.
• Develop, review, and maintain security policies, standards, procedures, and control documentation.
• Coordinate audit evidence collection for internal audits, external audits, compliance reviews, and customer assessments.
• Track audit findings, remediation plans, control deficiencies, policy exceptions, and risk acceptance activities.
• Perform control testing and compliance validation to ensure security controls are operating effectively.
• Assist with risk assessments, gap assessments, compliance readiness activities, and control maturity reviews.
• Support vendor and third-party risk management activities, including security questionnaires and risk reviews.
• Collaborate with IT, Security Operations, Infrastructure, Engineering, Legal, Procurement, Compliance, and Operations teams.
• Map security controls to frameworks including NIST, ISO 27001, SOC 2, and CIS Controls.
• Maintain risk registers, compliance calendars, control inventories, and audit repositories.
• Prepare compliance reports, dashboards, scorecards, and presentations for leadership.
• Monitor remediation efforts and work with control owners to ensure timely issue resolution.
• Support continuous improvement initiatives across the information security governance program.
• Stay informed on cybersecurity regulations, compliance trends, and industry best practices.

Skills

GRC

Cybersecurity

Policy writing

Documentation

Cross-functional

Vendor risk

Audit support

Tools

ServiceNow GRC

Archer

OneTrust

AuditBoard

LogicGate

Drata

Vanta

Job description

Beacon Hill Staffing Group, LLC seeks a Governance, Risk & Compliance (GRC) Specialist to strengthen governance, risk management, and compliance across IT, cloud, and OT environments. You will partner with security, engineering, legal, and procurement to mature the cybersecurity program from the ground up.

The role supports audits, policy development, and risk assessments, with opportunities to drive risk-based improvements and executive reporting in a dynamic Infrastructure setting.