Remote Vanta & GRC Consultant (Contractor)

Nearshore Cyber; United States, Northern America, Americas; Hybrid; USD 69,000 - 138,000; Part time

Job summary

Nearshore Cyber is seeking a Vanta Consultant (contractor) to implement Vanta for private-sector clients and build resilient GRC programs that endure after auditors depart.

The role involves guiding clients through SOC 2, ISO 27001, and related attestations, while delivering ongoing managed-compliance work on a remote, project-based basis.

Qualifications

• Hands-on experience implementing Vanta and developing GRC programs for private-sector organizations.
• Fluency in Spanish and English, spoken and written.
• Residence in Mexico or the United States.
• Set up to contract independently: 1099 or corp-to-corp in the US; in Mexico, RFC with CFDI invoicing.

Responsibilities

• Implement Vanta for private-sector clients: scope frameworks, connect integrations, configure controls, close gaps
• Use Vanta to build GRC programs that hold up after the auditor leaves - policies, evidence collection, vendor and personnel workflows
• Guide clients through SOC 2, ISO 27001, and similar attestations
• Support ongoing managed-compliance work after go-live

Skills

Vanta implementation

GRC program development

SOC 2 / ISO 27001

Bilingual Spanish/English

Job description

Vanta Consultant (Contractor)

Nearshore Cyber | Remote | Part-time, project-based | $50–$100 USD per hour

Nearshore Cyber is a cybersecurity services firm and Vanta partner working with clients in Mexico and the United States. We help companies implement Vanta and run working GRC programs on it: SOC 2, ISO 27001, and the cross-border compliance that comes with operating in both countries.

We are building a bench of independent consultants to deliver Vanta engagements as they arise. This is not a full-time job. Work is periodic and project-based, billed hourly at $50 to $100 USD depending on the engagement, and always remote.

What you'll do

• Implement Vanta for private-sector clients: scope frameworks, connect integrations, configure controls, close gaps
• Use Vanta to build GRC programs that hold up after the auditor leaves — policies, evidence collection, vendor and personnel workflows
• Guide clients through SOC 2, ISO 27001, and similar attestations
• Support ongoing managed-compliance work after go-live

What we require

• Hands-on experience implementing Vanta and using it to develop GRC programs for private-sector organizations. We will ask for specifics.
• Fluency in Spanish and English, spoken and written
• Residence in Mexico or the United States
• Set up to contract independently: 1099 or corp-to-corp in the US; in Mexico, an active RFC with the ability to issue CFDI invoices, personally or through your own company

Preferred locations

Mexico City, Guadalajara, Monterrey, Querétaro, Oaxaca de Juárez, or the Dallas–Fort Worth area. The work is remote regardless; these are where our clients and community cluster.

Helpful, not required

• Certifications such as CISA, CISSP, or ISO 27001 Lead Implementer
• Experience with venture-backed startups and fintechs
• Familiarity with Mexican data-protection law (LFPDPPP)

How it works

Apply and tell us about your Vanta work. We'll talk through your experience and add you to our roster. When an engagement matches your profile, we call.