Remote GRC Security Consultant (ISO, SOC 2, NIST)

Remote; San Francisco (CA); A distancia; USD 110.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Fully remote working within India

23 days annual leave + 10 Indianpublic

One additional paid day off for your/b

Healthcare insurance

Mental health & wellbeing platform

£2,000 professional development budget

Referral bonus up to £2,000

Descripción de la vacante

Partner Company is seeking an Information Security Consultant to join a GRC team and support organizations in strengthening their cybersecurity posture. You will deliver a broad range of consulting engagements, from compliance assessments to ongoing security advisory, working with clients at different maturity levels and across diverse industries in a fully remote setup.

You will guide audit preparations, develop remediation plans, and provide risk-based recommendations, while building strong

Formación

• 2–5 years of experience in information security, cybersecurity, risk management, compliance, or GRC.
• Experience with external client engagements and security improvement initiatives.
• Familiarity with ISO 27001, SOC 2, or NIST.
• Understanding of security controls, risk management, and security operations.
• Experience supporting compliance activities and security programmes.
• Strong written and verbal communication skills for client discussions and workshops.
• Ability to manage multiple clients and priorities in a remote setting.
• Proactive, self-managing, and able to work in a fully remote environment.
• Willingness to continuously learn and take on more responsibility.

Responsabilidades

• Deliver governance, risk, and compliance engagements aligned with ISO 27001, SOC 2, NIST, and regional standards.
• Conduct gap analyses, security posture assessments, and maturity reviews.
• Design and implement security programmes, policies, and control frameworks.
• Guide clients through audits, certification processes, and external security assessments.
• Provide ongoing security advisory and vCISO-style support.
• Lead client meetings, workshops, and risk assessment sessions.
• Translate security requirements into clear recommendations for stakeholders.
• Build trusted client relationships and raise risks or blockers proactively.
• Produce high-quality client deliverables and maintain consulting standards.

Conocimientos

Information security

Client-facing

ISO 27001

SOC 2

NIST

Communication skills

Remote work

Herramientas

Vanta

Drata

OneTrust

Descripción del empleo

Partner Company is seeking an Information Security Consultant to join a GRC team and support organizations in strengthening their cybersecurity posture. You will deliver a broad range of consulting engagements, from compliance assessments to ongoing security advisory, working with clients at different maturity levels and across diverse industries in a fully remote setup.

You will guide audit preparations, develop remediation plans, and provide risk-based recommendations, while building strong