GRC Consultant

A fully remote consulting opportunity for a detail-oriented and client-facing professional who can help organizations design, implement, and maintain strong Governance, Risk, and Compliance (GRC) programs.

In this role, you’ll advise clients on aligning their security posture with major frameworks and regulations such as SOC 2, ISO 27001, NIST 800-53, FedRAMP, GDPR, HIPAA, and others. You’ll guide them through certification life cycles, conduct gap assessments, develop and update policies, and prepare teams for successful third-party audits.

• Manage client engagements and compliance project plans.
• Lead readiness and certification efforts across major compliance frameworks.
• Perform risk and gap analyses to identify control deficiencies and remediation paths.
• Draft and refine security policies and documentation to meet audit standards.
• Provide advisory support on implementing technical and procedural controls.
• Deliver client education and audit preparation sessions.
• Act as a liaison between clients and auditors.
• Stay current on evolving compliance standards and best practices.

• Strong communication and presentation skills, comfortable leading client calls. Deep understanding of frameworks like SOC 2, ISO 27001, and NIST 800-53.
• Experience in risk management, audit readiness, and policy development.
• Professional certifications such as CISSP, CISA, CISM, or ISO 27001 Lead Implementer are preferred.
• Self-driven, organized, and comfortable managing multiple remote projects.

This role offers autonomy, flexibility, and the chance to make a measurable impact by helping organizations strengthen their compliance posture and achieve key certifications in a collaborative, high-performance environment.