Remote GRC Consultant: SOC 2 & ISO 27001 Expert

Jobgether; United States; Remote; USD 90,000 - 140,000; Full time

Benefits offered by this job

Remote work (Canada)

Contract role

PT schedule

Career growth

Direct exposure to leaders

Job summary

Jobgether is seeking an experienced GRC consultant to lead end-to-end compliance readiness and implementation engagements across SOC 2 Type I & II, ISO 27001, HIPAA, and privacy regulations in the US. You will manage evidence collection, risk assessments, and control mapping across frameworks while coordinating with client executives.

You'll work with Vanta, Drata, and similar platforms, conduct audits, and develop reusable knowledge bases.

Qualifications

• 5–7+ years in Governance, Risk and Compliance (GRC) or security auditing.
• Consulting or professional services experience managing multiple client engagements.
• Hands-on with SOC 2 Type I & II and ISO 27001/27002; audit readiness.
• Experience with GDPR, CCPA/CPRA or HIPAA.
• Ability to map controls across frameworks and build compliant programs.
• Strong understanding of cloud security, IAM, CI/CD pipelines and security controls.
• Excellent documentation and technical writing; fluent professional English.

Responsibilities

• Lead end-to-end compliance readiness and implementation for SOC 2, ISO 27001, HIPAA, and privacy laws.
• Manage and optimize GRC platforms (Vanta, Drata) for continuous monitoring and evidence collection.
• Perform risk assessments using NIST-style methods and translate findings to business risks.
• Design and maintain GRC programs, policies, control matrices, and evidence management.
• Conduct internal audits, identify gaps, and drive remediation plans.
• Coordinate vendor security assessments and client-facing questionnaires.
• Engage client executives, lead meetings, and manage stakeholder expectations.
• Produce high-quality deliverables: policies, risk registers, control mappings, reports.
• Coordinate with external auditors and support audit lifecycles.

Skills

GRC

Regulatory compliance

Auditing

Consulting

Client management

SOC 2

ISO 27001

GDPR/CCPA/ HIPAA

Cloud security

IAM

CI/CD security

GRC tools

Tools

Vanta

Drata

Job description

Jobgether is seeking an experienced GRC consultant to lead end-to-end compliance readiness and implementation engagements across SOC 2 Type I & II, ISO 27001, HIPAA, and privacy regulations in the US. You will manage evidence collection, risk assessments, and control mapping across frameworks while coordinating with client executives.

You'll work with Vanta, Drata, and similar platforms, conduct audits, and develop reusable knowledge bases.