Senior GRC Consultant - Remote & Audits Lead

Jobgether; Oregon; Hybride; USD 125 000 - 180 000; Plein temps

Avantages offerts par ce poste

Remote work (US)

Résumé du poste

Jobgether on behalf of a partner seeks a Senior GRC Consultant based in the United States to lead security, governance, risk, and compliance initiatives across multiple technology-focused client engagements.

You will drive compliance programs from scoping through remediation and audits, translating complex requirements into practical solutions while coordinating with executives, technical teams, and external auditors.

Qualifications

• 5–7+ years in Governance, Risk, and Compliance (GRC), regulatory compliance, or information security auditing.
• Experience in consulting or professional services, independently managing multiple client engagements.
• Strong practical expertise in SOC 2 Type I/II and ISO 27001/ISO 27002, including implementation, mapping, and audit readiness.
• Experience with GDPR, CCPA/CPRA, or HIPAA regulatory frameworks.
• Proven ability to develop and implement compliance programs across multiple frameworks.
• Solid cloud security, IAM, CI/CD, and security controls knowledge.
• Hands-on with GRC platforms such as Vanta, Drata, or equivalents.
• Excellent documentation and stakeholder management in English.

Responsabilités

• Lead end-to-end compliance readiness and implementation across SOC 2, ISO 27001, HIPAA, GDPR, and privacy regulations.
• Manage GRC platforms ensuring continuous compliance monitoring and evidence collection.
• Conduct risk assessments using methodologies like NIST 800-30 and translate findings into business risk.
• Design and maintain comprehensive GRC programs, control mappings, and evidence management procedures.
• Perform internal audits, assess control design, and recommend remediation measures.
• Coordinate vendor security assessments and develop reusable knowledge bases.
• Engage with client executives, lead meetings, and manage expectations across engagements.
• Prepare client deliverables: policies, risk registers, control matrices, and assessment reports.
• Coordinate with external auditors and support audit lifecycle end-to-end.

Connaissances

GRC governance

Regulatory compliance

Audit readiness

Stakeholder management

Cloud security basics

Documentation

Outils

Vanta

Drata

Audit tools

Description du poste

Jobgether on behalf of a partner seeks a Senior GRC Consultant based in the United States to lead security, governance, risk, and compliance initiatives across multiple technology-focused client engagements.

You will drive compliance programs from scoping through remediation and audits, translating complex requirements into practical solutions while coordinating with executives, technical teams, and external auditors.