Remote Senior GRC Lead: Security & Compliance

Jobgether; United States; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

100% remote work

Autonomy and ownership

Exposure to top clients

Professional development

Job summary

Jobgether, on behalf of our partner, is seeking a Senior GRC Consultant based in the United States. You will own security, governance, risk, and compliance initiatives across technology-focused client engagements, leading programs from scoping to audits and remediation.

You will work with executives, technical teams, and external auditors to translate complex security requirements into practical solutions, manage multiple engagements, and help clients strengthen their security posture and scale

Qualifications

• 5–7+ years in GRC, regulatory compliance, or security auditing.
• Experience in consulting or professional services.
• Expertise with SOC 2 Type I/II and ISO 27001/27002.
• Experience with GDPR, CCPA/CPRA, or HIPAA.
• Ability to map controls across frameworks.
• Strong cloud security, IAM, CI/CD, and security controls.
• Experience using Vanta or Drata.

Responsibilities

• Lead end-to-end compliance readiness and implementation across multiple engagements.
• Manage GRC platforms and evidence collection.
• Conduct risk assessments using NIST 800-30.
• Design and maintain GRC programs including policies and controls.
• Coordinate with auditors and support audit lifecycle.
• Develop client deliverables like risk registers and control matrices.
• Build relationships with client executives and stakeholders.

Skills

GRC expertise

SOC 2 Type I/II

ISO 27001

NIST 800-30

Cloud security

IAM

Auditing

Stakeholder mgmt

Tools

Vanta

Drata

Job description

Jobgether, on behalf of our partner, is seeking a Senior GRC Consultant based in the United States. You will own security, governance, risk, and compliance initiatives across technology-focused client engagements, leading programs from scoping to audits and remediation.

You will work with executives, technical teams, and external auditors to translate complex security requirements into practical solutions, manage multiple engagements, and help clients strengthen their security posture and scale