Senior IT GRC Consultant: Risk, Compliance & Strategy

Infinitive Inc; Ashburn (VA); On-site; USD 90,000 - 139,000; Full time

Job summary

Infinitive is seeking a Senior Consultant – IT GRC to drive client engagements from initiation to delivery. You will translate regulatory requirements into actionable frameworks, collaborate with client stakeholders and internal teams, and ensure value delivery with timely, high‑quality outputs.

You will lead risk assessments, policy development, and compliance roadmaps across frameworks such as NIST, ISO, SOC 2, GDPR, and more, while maintaining strong client relationships and billability

Qualifications

• Knowledge of IT GRC frameworks including NIST CSF, NIST 800-53, ISO 27001/27002, SOC 2.
• Experience producing compliance roadmaps, risk treatment plans, and audit readiness artifacts.
• Ability to map overlapping control requirements across frameworks for streamlined compliance.

Responsibilities

• Lead or co‑lead design, implementation, and assessment of IT GRC programs and controls.
• Perform regulatory gap assessments across HIPAA, PCI-DSS, SOX, GDPR, CCPA, FISMA, and sector requirements.
• Develop risk registers, control matrices, and audit evidence packages for clients.
• Support remediation of audit findings and sustain controls to reduce risk.
• Track milestones, flag risks, and ensure high‑quality, on‑time delivery.

Skills

IT GRC frameworks

Risk assessments

Audit readiness

Regulatory analysis

Stakeholder facilitation

Communication skills

Cloud security awareness

Tools

ServiceNow GRC

Archer

OneTrust

Vanta

Job description

Infinitive is seeking a Senior Consultant – IT GRC to drive client engagements from initiation to delivery. You will translate regulatory requirements into actionable frameworks, collaborate with client stakeholders and internal teams, and ensure value delivery with timely, high‑quality outputs.

You will lead risk assessments, policy development, and compliance roadmaps across frameworks such as NIST, ISO, SOC 2, GDPR, and more, while maintaining strong client relationships and billability