[Hiring] GRC Consultant @FyerX

Role Description

We are seeking an experienced GRC Consultant to design, evaluate, and monitor our corporate cybersecurity governance frameworks and risk management strategies. The ideal candidate will:

• Translate complex regulatory frameworks into actionable policy layers.
• Lead enterprise risk assessments.
• Manage third-party vendor audits.
• Ensure continuous compliance across complex digital landscapes.

Key Responsibilities:

• Design and maintain corporate security governance frameworks, writing information security policies, procedural standards, and control guidelines aligned with global benchmarks.
• Lead comprehensive enterprise risk assessments, identifying infrastructure vulnerabilities, evaluating operational impacts, mapping threat probabilities, and tracking remediation registers.
• Orchestrate regulatory compliance audit preparedness campaigns, validating configurations against mandated frameworks including ISO 27001, SOC 2 Type II, NIST, PCI-DSS, GDPR, or HIPAA.
• Govern third-party vendor risk assessment pipelines, reviewing external service provider security posture configurations, evaluating SOC reports, and defining contract security data guidelines.
• Manage internal control validation audits, testing control effectiveness across identity management systems, change configuration lines, asset trackers, and incident logging setups.
• Facilitate security awareness programs and compliance training drives, building materials to educate workforce divisions on corporate data protection responsibilities and social engineering risks.
• Coordinate directly with internal executive stakeholders and external auditors, assembling compliance evidence packages, documenting control gaps, and presenting risk posture matrices.

Qualifications

• 5 to 9 years of core information technology audit or security compliance experience.
• 4+ dedicated years actively managing governance, risk, and regulatory tracks.
• Strong technical mastery of specialized GRC software ecosystems (e.g., OneTrust, ServiceNow GRC, MetricStream).
• Deep structural understanding of information security perimeters, data privacy laws, identity governance baselines, and audit remediation lifecycles.
• Mandatory certification: CISA, CRISC, or CISM.

Requirements

• Certified Information Systems Security Professional (CISSP) designation (preferred).
• Prior consulting background driving complex multi-framework compliance alignments for fast-scaling enterprise cloud infrastructures or global financial institutions.