Fractional Senior GRC Consultant / Governance Manager & Lead

At Digi Cosmos (https://digiaudit.ai/about), we need ‘Fractional Senior GRC Consultant / Governance Manager & Lead’ for organizations/SMEs in US and Canada.

About the Role:

• Core Mandate: Establishes, maintains, and continuously improves the client's GRC governance framework — designing policy hierarchies, committee structures, and decision-making frameworks that align business strategy with risk appetite and regulatory obligation, Design program architecture, scope compliance requirements, and manage the executive governance cadence.
• Flexibility: Project-based, on-demand engagements tailored to client needs.
• Compensation: Competitive hourly rate based on active engagement.

Apply to join our global partner network: https://digiaudit.ai/smart\-rmos\-managed\-services\#join

Responsibilities:

• Design and maintain the enterprise governance framework (policy hierarchy, standards, procedures, guidelines)
• Policy & Charter Management: Define, draft, and maintain the client's core security and compliance policy stack, ensuring alignment with business objectives.
• Control Mapping: Architect the compliance environment by mapping internal controls to required frameworks utilizing the Smart RMOS platform to maximize cross-framework inheritance.
• Program Orchestration: Run the ongoing audit and compliance cadence, managing control gaps and driving remediation efforts.
• Stakeholder Reporting: Own the generation and delivery of executive and board reporting, translating analyst-level data into strategic compliance summaries.
• Regulatory Navigation: Act as the primary liaison during regulatory changes or when scoping new compliance requirements driven by client growth.
• Define roles and responsibilities (RACI) across GRC functions
• Conduct governance maturity assessments using COSO, COBIT, or ISO 38500
• Align governance structure for US/Canadian with regulatory requirements (SOX, OSFI, PIPEDA, SOC 2 etc.)
• Coordinate governance committee agendas, minutes, and action registers
• Develop and maintain the GRC program roadmap and scorecard
• Manage relationships with external auditors and regulators
• Train senior leadership on governance responsibilities and tone-at-the-top expectations Leveraging the ‘Smart RMOS’ platform to execute these duties efficiently. https://digiaudit.ai/risk\-management\-governance\-compliance\-smart\-RMOS\-by\-digi\-cosmos

Certifications: CGEIT, CRISC, CISA; MBA or Law degree an asset

KPIs Examples: 1. % of governance policies reviewed/updated on schedule (target: 100% annually) 2. Board GRC report delivered on time (target: 100% of scheduled meetings) 3. Governance maturity score improvement (target: +0.5 level/year on CMMI scale) 4. Open governance action items closed within SLA (target: >85%) 5. Stakeholder satisfaction score (target: >4.0/5.0) Apply to join our global partner network: https://digiaudit.ai/smart\-rmos\-managed\-services\#join