Hybrid GRC Specialist: Governance & Compliance

Beacon Hill Staffing Group, LLC; Des Moines (IA); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Federal leave programs

State leave programs

Details on benefit offerings provided

Job summary

Beacon Hill Staffing Group, LLC is seeking a Governance, Risk & Compliance (GRC) Specialist to join a growing Information Security team. The role covers governance, risk management, compliance across IT, cloud, and OT, and requires collaboration with security, engineering, legal, procurement, and business stakeholders.

The position offers a 6-month contract with strong extension or conversion potential. Hybrid work options available in Houston, TX and remote in Chicago, IL, with start date

Qualifications

• 3+ years in Governance, Risk & Compliance, cybersecurity compliance, IT audit, or related disciplines.
• Strong knowledge of NIST CSF, NIST 800-53, NIST 800-171, ISO 27001, SOC 2, CIS Controls.
• Experience coordinating audits, evidence collection, control testing, and reporting.
• Ability to develop and maintain security policies, standards, and control documentation.
• Experience with risk assessments, gap assessments, and control reviews.
• Familiarity with third-party and vendor risk management processes.
• Excellent documentation and business-friendly communication skills.
• Experience working with cross-functional teams across technology and business units.

Responsibilities

• Support and maintain the GRC program across IT, cloud, and OT environments.
• Develop, review, and maintain security policies, standards, procedures, and control docs.
• Coordinate audit evidence collection for internal/external audits and assessments.
• Track audit findings, remediation plans, risk acceptance, and control deficiencies.
• Perform control testing and compliance validation to ensure security controls operate effectively.
• Assist with risk assessments, gap analyses, and control maturity reviews.
• Support third-party and vendor risk management activities and questionnaires.
• Collaborate with IT, Security, Legal, Procurement, Compliance, and Operations teams.
• Map controls to frameworks: NIST, ISO 27001, SOC 2, CIS Controls.
• Maintain risk registers, calendars, control inventories, and audit repositories.
• Prepare compliance reports, dashboards, and leadership presentations.
• Monitor remediation efforts and drive timely issue resolution.
• Support continuous improvement across the information security governance program.
• Stay informed on cybersecurity regulations and industry best practices.

Skills

GRC

NIST CSF

NIST 800-53

NIST 800-171

ISO 27001

SOC 2

CIS Controls

Audit support

Vendor risk

Policy development

Tools

ServiceNow GRC

Archer

OneTrust

AuditBoard

LogicGate

Drata

Vanta

Job description

Beacon Hill Staffing Group, LLC is seeking a Governance, Risk & Compliance (GRC) Specialist to join a growing Information Security team. The role covers governance, risk management, compliance across IT, cloud, and OT, and requires collaboration with security, engineering, legal, procurement, and business stakeholders.

The position offers a 6-month contract with strong extension or conversion potential. Hybrid work options available in Houston, TX and remote in Chicago, IL, with start date