GRC Consultant

Core Responsibilities:

• Develop and oversee Governance Risk and Compliance (GRC) initiatives
• Conduct comprehensive enterprise risk assessments and manage risk registers
• Establish, review, and revise security policies, standards, procedures, and controls
• Facilitate adherence to regulatory compliance standards including ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS, SOX, NIST, and COBIT
• Execute control testing, compliance assessments, and gap analysis
• Organize internal and external audit processes, ensuring remediation activities are tracked
• Monitor compliance metrics and generate governance reports and dashboards
• Collaborate with business and technology teams to identify, assess, and mitigate risks
• Ensure thorough completion and review of third-party vendor risk assessments
• Assist with cybersecurity governance efforts and risk treatment strategies
• Promote awareness programs focused on risk and compliance obligations
• Essential Qualifications
• Deep understanding of GRC frameworks and methodologies
• Proficient in risk assessment, risk management, and compliance monitoring
• Familiarity with ISO 27001, NIST CSF, COBIT, SOX, PCI DSS, GDPR, HIPAA, or SOC frameworks
• Experience with GRC software tools such as
• ServiceNow GRC
• RSA Archer
• OneTrust
• MetricStream
• AuditBoard
• Knowledge of information security controls and best practices in cybersecurity
• Background in audit management and control testing
• Strong analytical, documentation, and stakeholder management capabilities
• Desirable Qualifications
• Experience with cloud compliance across Azure, AWS, and GCP
• Knowledge of third-party risk management (TPRM)
• Familiarity with Cybersecurity, Identity and Access Management (IAM), Data Privacy, and Security Operations
• Experience in enterprise risk governance and reporting

Technical Qualifications:

• Key skills include Technology SAP Functional SAP GRC

Preferred Qualifications:

Technology->SAP Functional->SAP GRC