GRC Consultant

Roles & Responsibilities

• Implement and manage Governance, Risk, and Compliance (GRC) programs.
• Perform enterprise risk assessments and maintain risk registers.
• Define, review, and update security policies, standards, procedures, and controls.
• Support regulatory compliance requirements such as ISO 27001, SOC 2, GDPR, HIPAA, PCI-DSS, SOX, NIST, and COBIT.
• Conduct control testing, compliance assessments, and gap analyses.
• Coordinate internal and external audits and track remediation activities.
• Monitor compliance metrics and prepare governance reports and dashboards.
• Work with business and technology teams to identify, assess, and mitigate risks.
• Ensure third-party/vendor risk assessments are completed and reviewed.
• Support cybersecurity governance initiatives and risk treatment plans.
• Drive awareness programs related to risk and compliance requirements.
• Required Skills
• Strong understanding of GRC frameworks and methodologies.
• Experience with risk assessment, risk management, and compliance monitoring.
• Knowledge of ISO 27001, NIST CSF, COBIT, SOX, PCI-DSS, GDPR, HIPAA, or SOC frameworks.
• Experience with GRC tools such as:
• ServiceNow GRC
• RSA Archer
• OneTrust
• MetricStream
• AuditBoard
• Understanding of information security controls and cybersecurity best practices.
• Experience in audit management and control testing.
• Strong analytical, documentation, and stakeholder management skills.
• Preferred Skills
• Experience in cloud compliance (Azure, AWS, GCP).
• Knowledge of third-party risk management (TPRM).
• Familiarity with Cybersecurity, IAM, Data Privacy, and Security Operations.
• Experience in enterprise risk governance and reporting.

Technical Requirements

• Primary skills:Technology->SAP Functional->SAP GRC