Senior GRC Cybersecurity Consultant (8‑Month)

Quantum Technologies. LLC; San Ramon (CA); On-site; USD 87,000 - 117,000; Full time

Job summary

Quantum Technologies LLC in San Ramon, California seeks an experienced Cybersecurity GRC Consultant to support governance, risk, compliance and audit initiatives across the enterprise.

You will apply NIST CSF, ISO 27001, SOC 2, PCI DSS and COBIT, manage audits, assess risks, and coordinate vendor risk. Familiarity with ServiceNow GRC, RSA Archer, OneTrust, AuditBoard or MetricStream is a plus.

Qualifications

• Strong experience in Governance, Risk & Compliance (GRC).
• Hands-on experience with NIST CSF, ISO 27001, SOC 2, PCI DSS and COBIT.
• Expertise in cybersecurity risk assessments, ITGC and security control testing.
• Experience managing internal/external audits and compliance assessments.
• Third-party/vendor risk management and remediation tracking.
• Experience with GRC tools such as ServiceNow GRC, RSA Archer, OneTrust, AuditBoard or MetricStream.
• Strong documentation, reporting and stakeholder management skills.

Responsibilities

• Support enterprise security governance, risk management, compliance and audit initiatives.
• Lead or participate in risk assessments and ITGC testing.
• Perform cybersecurity risk assessments and security control testing.
• Coordinate internal and external audits and compliance assessments.
• Oversee third-party/vendor risk management and remediation tracking.
• Leverage GRC tools (ServiceNow GRC, RSA Archer, OneTrust, AuditBoard, MetricStream) to document controls and evidence.
• Prepare clear documentation and reports for stakeholders.

Skills

GRC

NIST CSF

ISO 27001

SOC 2

PCI DSS

COBIT

Tools

ServiceNow GRC

RSA Archer

OneTrust

AuditBoard

MetricStream

Job description

Quantum Technologies LLC in San Ramon, California seeks an experienced Cybersecurity GRC Consultant to support governance, risk, compliance and audit initiatives across the enterprise.

You will apply NIST CSF, ISO 27001, SOC 2, PCI DSS and COBIT, manage audits, assess risks, and coordinate vendor risk. Familiarity with ServiceNow GRC, RSA Archer, OneTrust, AuditBoard or MetricStream is a plus.