Senior GRC Consultant

Senior GRC Consultant, Contractor

We are seeking an experienced Senior GRC Consultant, Contractor to provide strategic advisory support for Global Security & Risk Management initiatives. This role will assess current governance, risk, and compliance capabilities, develop future-state operating models, define GRC roadmaps, and provide recommendations that enable scalable, efficient, and risk-informed business operations. The consultant will partner with executive stakeholders to design enterprise GRC processes, improve governance effectiveness, and guide strategic transformation initiatives.

• Conduct current-state assessments of governance, risk, compliance, and third-party risk capabilities.

• Evaluate existing GRC operating models, processes, controls, and governance structures to identify gaps and improvement opportunities.

• Develop enterprise GRC strategy aligned with business objectives and regulatory requirements.

• Define multi-year GRC roadmaps with prioritized initiatives, milestones, and measurable outcomes.

• Design future-state GRC operating models, including governance structures, roles, responsibilities, and decision-making processes.

• Lead GRC process design across risk management, policy management, compliance, third-party risk, and control lifecycle management.

• Develop strategic recommendations for GRC platform capabilities and process automation.

• Facilitate executive workshops and stakeholder interviews to validate business requirements and future-state designs.

• Advise leadership on governance frameworks, risk management practices, and industry best practices.

• Produce executive-ready assessments, recommendations, maturity reports, and transformation plans.

• Define KPIs, KRIs, governance metrics, and reporting frameworks to measure program effectiveness.

• Provide strategic oversight during implementation to ensure solutions align with target operating models.

Skills:

governance, risk, compliance, grc transformation, audit readiness

Top Skills Details: governance, risk, compliance, grc transformation

Additional Skills &

Qualifications:

Education Bachelor's degree in Information Security, Computer Science, Business, or related field preferred; equivalent experience considered. Certifications Preferred:
Relevant GRC, risk, audit, or security certifications such as CRISC, CISA, CISM, CGRC, or similar.

Experience:

8-10+ years of experience in GRC, risk advisory, governance transformation, compliance, or related consulting roles; experience conducting current-state assessments, maturity reviews, or operating model design; experience developing roadmaps and executive recommendations; familiarity with enterprise risk and compliance frameworks such as NIST CSF, ISO 27001, SOC 2, COSO, or similar; experience in regulated or complex enterprise environments preferred.

Technical

Skills:

Strong understanding of GRC operating models, governance structures, process design, and control frameworks. Ability to assess process gaps, define target-state designs, and recommend practical improvements. Experience with GRC platforms such as One Trust, Service Now GRC, RSA Archer, Metric Stream, Logic Gate, Audit Board, or equivalent from a strategic or solution-advisory perspective. Proficiency in translating assessment findings into roadmaps, presentations, and executive-level reporting.

Strong Microsoft Office skills.

Non-Technical

Skills:

Strategic thinker with strong analytical and problem-solving skills. Clear communicator who can influence technical and business stakeholders. Comfortable facilitating workshops and presenting recommendations to leadership. Organized, detail-oriented, and able to manage multiple priorities independently. Continuous improvement mindset with a consultative approach.

Experience Level: Expert Level

Job Type &

Location:

This is a Contract position based out of Princeton, NJ.

Pay and Benefits:

The pay range for this position is $100.00 - $140.00/hr individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related…