Information Technology Governance Consultant

Cyberr; United States; On-site; USD 110,000 - 170,000; Full time

Job summary

Mirai seeks a Senior Governance, Risk and Compliance (GRC) Consultant to guide clients in designing and implementing tailored governance, risk, and compliance programs. You will lead advisory efforts, assess control maturity, and craft strategic roadmaps to enhance operational resilience and regulatory readiness.

Ideal candidates bring deep GRC expertise, strong client-facing skills, and the ability to work remotely with diverse client teams across sectors.

Qualifications

• 5+ years of experience in cybersecurity governance, risk, and compliance roles, preferably in a consulting or client-facing capacity.
• Proven expertise with information security standards and frameworks such as ISO/IEC 27001, NIST SP 800-53, COBIT, and PCI.
• ISO/IEC 27001 Lead Auditor Certification Experience or certification in PCI DSS, CMMC, and/or FedRAMP would be an asset.
• Familiarity with industry-specific compliance challenges across various sectors.
• Strong understanding of privacy laws and regulations including GDPR, PIPEDA, and FATCA.
• Demonstrated experience developing security policies, risk management strategies, and governance frameworks.
• Ability to perform control assessments and gap analyses with actionable recommendations.
• Excellent verbal and written communication skills, including experience working with senior stakeholders.
• Strong client presence, professionalism, and stakeholder engagement skills.
• Ability to work independently and remotely, while managing multiple client projects.
• A positive, can-do, customer-focused attitude.

Responsibilities

• ESGRC Advisory & Implementation: Lead clients through governance, risk and compliance programs.
• e.Security Control Assessment: Assess controls for maturity and compliance with ISO/NIST/PCI etc.
• P.Privacy Compliance: Analyze privacy practices for GDPR, PIPEDA, and related regs.
• k.Security Program Development: Design client-specific security governance structures and policies.
• s.Risk-Based Recommendations: Provide strategic and tactical security recommendations to optimize budgets.
• s.Client Engagement & Communication: Build relationships and deliver executive roadmaps.
• s.Internal Process Optimization: Improve Mirai’s GRC service delivery methodologies.
• s.Representation & Thought Leadership: Represent Mirai with integrity in client engagements.

Skills

Leadership

Client engagement

Stakeholder management

Communication skills

Job description

As the Senior Governance, Risk and Compliance (GRC) Consultant, you will serve as a trusted advisor to our clients, providing both tactical and strategic recommendations that align with their business goals and compliance obligations. You will lead the design and implementation of tailored cybersecurity programs that support operational resilience, regulatory readiness, and client trust. This is a high-impact role suited for a professional with deep knowledge of GRC frameworks and exceptional client advisory skills.

RESPONSIBILITI

• ESGRC Advisory & Implementation: Lead clients through the planning, design, configuration, and transition phases of governance, risk, and compliance programs, ensuring alignment with business objectives and risk toleranc
• e.Security Control Assessment: Assess technical and procedural security controls to evaluate their maturity, effectiveness, and compliance against industry standards and frameworks such as ISO/IEC 27001, NIST SP 800-53, PCI DSS, COBIT, HIPAA, and NERC CI
• P.Privacy Compliance: Analyze privacy practices and controls for compliance with regulations such as GDPR, FIPPA, PIPEDA, and PIPA. Recommend improvements to ensure privacy assurance and reduce regulatory ris
• k.Security Program Development: Design and develop client-specific security governance structures, policies, and processes. Build scalable and sustainable information security programs to support client growth and compliance objective
• s.Risk-Based Recommendations: Provide strategic and tactical security recommendations to help clients optimize budgets while strengthening security posture across operations, systems, and processe
• s.Client Engagement & Communication: Build trusted relationships with client stakeholders. Deliver compelling presentations, reports, and strategic roadmaps tailored to executive and technical audience
• s.Internal Process Optimization: Contribute to the development and refinement of Mirai’s GRC service delivery methodologies and best practice
• s.Representation & Thought Leadership: Represent Mirai with integrity, professionalism, and subject-matter expertise in both client-facing engagements and the broader industry communit

y

. QUALIFICATIONS & REQUIREM

• ENTS5+ years of experience in cybersecurity governance, risk, and compliance roles, preferably in a consulting or client-facing capac
• ity.Proven expertise with information security standards and frameworks such as ISO/IEC 27001, NIST SP 800-53, COBIT, and PCI
• DSS.ISO/IEC 27001 Lead Auditor Certification Experience or certification in PCI DSS, CMMC, and/or FedRAMP would be an as
• set.Familiarity with industry-specific compliance challenges across various sect
• ors.Strong understanding of privacy laws and regulations including GDPR, PIPEDA, and FI
• PPA.Demonstrated experience developing security policies, risk management strategies, and governance framewo
• rks.Ability to perform control assessments and gap analyses with actionable recommendati
• ons.Excellent verbal and written communication skills, including experience working with senior stakehold
• ers.Strong client presence, professionalism, and stakeholder engagement ski
• lls.Comfortable working independently and remotely, while managing multiple client proje
• cts.A positive, can-do, customer-focused attitud