GRC Consultant

About the position

In this position, your duties are:

• Conduct GRC assessments identifying critical security risks and potential control gaps within client organizations
• Develop and implement tailored GRC solutions aligning with industry best practices and client-specific requirements
• Assist clients in designing and implementing effective policies, procedures, and controls to mitigate security risks
• Perform gap analysis and recommend appropriate tools and technologies to enhance GRC practices
• Support clients with regulatory compliance including understanding and addressing relevant laws and regulations
• Prepare and deliver engaging presentations and reports on GRC findings and recommendations
• Provide ongoing advisory services and support to clients ensuring continuous improvement of their GRC posture
• Collaborate with internal teams (e.g. technical, sales) to support client engagements and deliver integrated solutions

We are looking for someone with experience in:

• Minimum 3 years of experience in GRC consulting or related field (e.g. risk management, compliance)
• Strong understanding of core GRC principles, frameworks (e.g. COSO, ISO 27001), and relevant regulations (e.g. GDPR, PCI DSS)
• Proven track record of successfully assisting clients in implementing and improving their GRC programs
• Excellent analytical and problem-solving skills with the ability to identify and assess complex risks
• Strong communication, presentation, and interpersonal skills, able to effectively engage with clients at all levels
• Proficiency in GRC assessment methodologies and tools
• Experience working with diverse industry sectors and regulatory environments
• Ability to work independently and manage multiple projects simultaneously

The goals of this position are:

• Successfully complete assigned GRC assessments and consulting projects on time and within budget
• Achieve high client satisfaction with the quality and effectiveness of delivered services
• Contribute to the continuous development and improvement of Zerosploit GRC consulting services
• Stay up to date on evolving GRC best practices and regulations
• Build strong relationships with clients and internal stakeholders