Remote GRC Consultant: Security, Risk & Compliance

Zoho; United States; Remote; USD 120,000 - 180,000; Part time

Job summary

Fyerx seeks an experienced GRC Consultant to design, evaluate, and monitor our cybersecurity governance and risk management frameworks. You will translate complex regulatory requirements into actionable policies, lead enterprise risk assessments, and coordinate audits with internal teams and external auditors.

You will drive third‑party vendor risk programs, ensure ongoing compliance across ISO 27001, SOC 2, GDPR, HIPAA, and NIST, and mentor junior staff while reporting to senior stakeholders in

Qualifications

• 5 to 9 years of core IT audit or security compliance experience.
• 4+ dedicated years actively managing governance, risk, and regulatory tracks.
• Mandatory certification: CISA, CRISC, or CISM.
• Strong knowledge of GRC software ecosystems (OneTrust, ServiceNow GRC, MetricStream).

Responsibilities

• Design and maintain corporate security governance frameworks, policies, standards, and control guidelines.
• Lead comprehensive enterprise risk assessments, map threats, and track remediation.
• Orchestrate regulatory compliance audit preparedness across ISO 27001, SOC 2 Type II, NIST, GDPR, HIPAA.
• Govern third-party vendor risk assessment pipelines and review external security posture.
• Manage internal control validation audits and incident logging setups.
• Coordinate with executives and external auditors, document gaps, and present risk posture.

Skills

Governance

Risk management

Compliance audits

Vendor risk assessment

Security policy

Tools

OneTrust

ServiceNow GRC

MetricStream

Job description

Fyerx seeks an experienced GRC Consultant to design, evaluate, and monitor our cybersecurity governance and risk management frameworks. You will translate complex regulatory requirements into actionable policies, lead enterprise risk assessments, and coordinate audits with internal teams and external auditors.

You will drive third‑party vendor risk programs, ensure ongoing compliance across ISO 27001, SOC 2, GDPR, HIPAA, and NIST, and mentor junior staff while reporting to senior stakeholders in