GRC Consultant

Key Responsibilities:

• Implement and manage Governance Risk and Compliance GRC programs
• Perform enterprise risk assessments and maintain risk registers
• Define review and update security policies standards procedures and controls
• Support regulatory compliance requirements such as ISO 27001 SOC 2 GDPR HIPAA PCI DSS SOX NIST and COBIT
• Conduct control testing compliance assessments and gap analyses
• Coordinate internal and external audits and track remediation activities
• Monitor compliance metrics and prepare governance reports and dashboards
• Work with business and technology teams to identify assess and mitigate risks
• Ensure third party vendor risk assessments are completed and reviewed
• Support cybersecurity governance initiatives and risk treatment plans
• Drive awareness programs related to risk and compliance requirements
• Required Skills
• Strong understanding of GRC frameworks and methodologies
• Experience with risk assessment risk management and compliance monitoring
• Knowledge of ISO 27001 NIST CSF COBIT SOX PCI DSS GDPR HIPAA or SOC frameworks
• Experience with GRC tools such as
• ServiceNow GRC
• RSA Archer
• OneTrust
• MetricStream
• AuditBoard
• Understanding of information security controls and cybersecurity best practices
• Experience in audit management and control testing
• Strong analytical documentation and stakeholder management skills
• Preferred Skills
• Experience in cloud compliance Azure AWS GCP
• Knowledge of third party risk management TPRM
• Familiarity with Cybersecurity IAM Data Privacy and Security Operations
• Experience in enterprise risk governance and reporting

Technical Requirements:

• Primary skills Technology SAP Functional SAP GRC

Preferred Skills: