Remote GRC & Data Privacy Strategist

Mashreq Bank; United States; Remote; USD 80,000 - 120,000; Full time

Benefits offered by this job

Fully remote work environment

Competitive salary

Professional development opportunities

Access to GRC and data privacy tools

Health and wellness support

Job summary

A leading international financial institution is seeking a Remote GRC and Data Privacy Consultant to join their cybersecurity team. This fully remote role involves developing GRC frameworks, advising on compliance with data privacy regulations, and conducting risk assessments. The ideal candidate should have a bachelor's degree, 3–7 years of relevant experience, and strong knowledge of GRC methodologies and data protection laws. This position offers flexible working hours and opportunities for professional development.

Qualifications

• 3–7 years of experience in GRC, cybersecurity compliance, or data privacy consulting.
• Experience in remote or global teams and across multiple regulatory environments.
• Professional certifications such as CISA, CISM, CRISC, CIPM, or ISO 27001 Lead Implementer/Auditor are highly desirable.

Responsibilities

• Develop and manage enterprise-wide GRC frameworks.
• Conduct risk assessments and gap analyses.
• Advise on data privacy regulations and ensure compliance.
• Design and implement policies and procedures for governance and privacy.

Skills

GRC methodologies

Data protection laws

Analytical skills

Communication

Stakeholder management

Education

Bachelor's degree in Information Security, Risk Management, Computer Science, Law, or a related field

Master's degree preferred

Tools

ServiceNow

Archer

OneTrust

Job description

A leading international financial institution is seeking a Remote GRC and Data Privacy Consultant to join their cybersecurity team. This fully remote role involves developing GRC frameworks, advising on compliance with data privacy regulations, and conducting risk assessments. The ideal candidate should have a bachelor's degree, 3–7 years of relevant experience, and strong knowledge of GRC methodologies and data protection laws. This position offers flexible working hours and opportunities for professional development.