GRC Specialist - Costa Mesa, CA or Los Angeles, CA

GRC Specialist

Duration:
Contract to hire.

Location:

Costa Mesa, CA or Los Angeles, CA.
Not eligible for sponsorship; W2 only; no third‑party candidates considered.

• Regulatory & Framework Expertise:
  Mastery of NIST CSF, ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS, SOX.
• Risk Management:
  
  Conduct risk assessments, identify vulnerabilities, develop mitigation strategies, including TPRM and business continuity planning.
• Audit & Monitoring:
  Design and execute internal audits, evaluate control effectiveness, facilitate external audit fieldwork.
• GRC Platform Proficiency:
  Experience with Collibra, Delphix, Snowflake, AWS to automate compliance tracking and reporting.
• Emerging Tech Governance:
  Knowledge of AI risk (ISO 42001), cloud security, and automation.

• Communication:
  Translate complex technical and regulatory requirements into actionable guidance for stakeholders at all levels.
• Analytical Thinking:
  Dissect complex data, identify patterns in risk, and propose practical solutions to compliance gaps.
• Ethics & Integrity:
  Maintain high accountability standards to foster a culture of compliance and make principled decisions.
• Adaptability:
  Stay current with rapidly evolving laws and emerging global risks.

• Bachelor’s degree in Business, Finance, Information Technology, Law, or a related field.
• Key
  
  Certifications:
  
  CISA, CRISC, CGRC, CISSP, CISM.