GRC Consultant - IT Compliance

Key Responsibilities:

- Lead audit and compliance engagements (ISO 27001, SOC 2, HIPAA, DPDPA)

- Conduct risk assessments and gap assessments independently

- Design, implement, and review security controls and policies

- Own client-facing compliance documentation and remediation tracking

- Manage stakeholder coordination across internal teams and client organizations

- Mentor junior GRC team members on frameworks and methodology

Requirements:

- 25 years of experience in GRC / Information Security Compliance

- Proven experience implementing controls based on ISO 27001, NIST, and/or similar frameworks

- Experience leading client engagements or audits with minimal supervision

- Strong communication, stakeholder management, and documentation skills

- Relevant certifications (ISO 27001 LA, CISA, CRISC, or similar) preferred