Senior Consultant, GRC

Insight Global; Wilmington (DE); On-site; USD 150,000 - 190,000; Full time

Job summary

Insight Global is seeking a Senior Consultant for Governance, Risk & Compliance (GRC) to lead cybersecurity governance, risk management, compliance, and third-party risk initiatives. The role partners with senior stakeholders to drive a risk-based cybersecurity program that protects assets while enabling business objectives.

The ideal candidate will provide strategic leadership with hands-on execution, oversee a small GRC team, and translate cybersecurity risks into business terms for informed

Qualifications

• 15+ years of experience in cybersecurity, governance, risk management, compliance, audit, or related disciplines.
• Experience building and operating GRC programs, and developing executive/Board-level communications.
• Strong knowledge of cybersecurity frameworks, risk management, third-party risk, regulatory compliance, and security governance practices.
• Certifications such as CISSP, CISM, CRISC, CISA, or CGEIT preferred.
• Experience in regulated industries (pharma/biotech/healthcare or similar) preferred.

Responsibilities

• Develop, implement, and maintain cybersecurity governance frameworks, policies, standards, and procedures.
• Lead enterprise risk management, risk assessments, risk registers, and risk reporting.
• Oversee third-party risk management across vendor lifecycle and security requirements.
• Lead compliance, audit readiness, remediation of findings, and regulatory alignment.
• Develop cybersecurity metrics, KRIs/KPIs, and executive risk reporting to governance bodies.
• Lead security awareness and culture-building initiatives across the organization.
• Act as trusted advisor to business/technology leaders and drive cross-functional risk discussions and resolutions.
• Lead, mentor, and develop a small GRC team, setting priorities and development plans.
• Hands-on execution of risk assessments, policy development, audits, and board-ready presentations.

Skills

Cybersecurity governance

Executive communications

Leadership

Risk management

Education

CISSP / CISM / CRISC / CISA / CGEIT

Job description

Job Description

We are seeking a Senior Consultant, Governance, Risk & Compliance (GRC) who will be responsible for leading and executing cybersecurity governance, risk management, compliance, security assurance, and third-party risk management initiatives. This position partners closely with business, technology, and executive stakeholders to drive a risk-based cybersecurity program that protects organizational assets while enabling business objectives.

This role combines strategic leadership with hands-on execution and provides oversight of a small team of GRC professionals. The ideal candidate will serve as a trusted advisor to senior leadership, translating cybersecurity risks into business terms and supporting informed risk-based decision-making.

Key Responsibilities

• Cybersecurity GovernanceDevelop, implement, and maintain cybersecurity policies, standards, procedures, and governance frameworks.Lead governance committees, policy exception processes, and cross-functional accountability for cybersecurity risk management.
• Enterprise Risk ManagementManage cybersecurity risk assessments, risk registers, risk treatment plans, and risk reporting activities.Drive a risk-based approach to cybersecurity priorities, investments, and business decisions.
• Third-Party Risk ManagementOversee vendor security assessments, due diligence reviews, contract security requirements, and remediation efforts.Partner with Procurement, Legal, Privacy, and business stakeholders to manage risk throughout the vendor lifecycle.
• Compliance, Audit & Security AssuranceLead cybersecurity compliance initiatives, control assessments, audit readiness activities, and regulatory alignment efforts.Manage remediation of audit findings, control gaps, compliance issues, and regulatory commitments.
• Metrics, Reporting & Executive CommunicationsDevelop and maintain cybersecurity metrics, dashboards, KRIs, KPIs, and reporting processes.Prepare and present cybersecurity updates, risk assessments, and strategic recommendations to executive leadership and governance bodies.
• Security Awareness & CultureLead cybersecurity awareness, training, and culture-building initiatives.Measure program effectiveness and drive continuous improvement through communications and education campaigns.
• Cross-Functional CollaborationAct as a trusted cybersecurity advisor to business and technology leaders.Facilitate cross-functional discussions and drive resolution of cybersecurity, compliance, and third-party risk issues.
• Team LeadershipLead, mentor, and develop a small team of GRC professionals.Establish priorities, performance expectations, and career development plans.Foster a collaborative, customer-focused, and results-oriented culture.
• Hands-On ExecutionConduct cybersecurity risk assessments, vendor assessments, policy development, compliance reviews, audit support, executive reporting, and board-level presentation development.Manage day-to-day GRC operations and ensure timely execution of governance, risk, compliance, and reporting activities.

Skills and Requirements

• 15+ years of experience in cybersecurity, governance, risk management, compliance, audit, or related disciplines, including leadership experience.
• Demonstrated experience building and operating cybersecurity GRC programs, developing executive and Board-level communications, and partnering effectively with senior executives and business leaders.
• Strong knowledge of cybersecurity frameworks, risk management methodologies, third-party risk management, regulatory compliance, and security governance practices.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, or CGEIT preferred.
• Experience in the pharmaceutical, biotechnology, healthcare, or other highly regulated industries preferred.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].