GRC Consultant

Roles and Responsibilities :

• Conduct risk assessments, develop mitigation strategies, and implement controls to ensure compliance with NIST Cybersecurity Framework (CSF) standards.
• Provide guidance on IT general controls, internal audit processes, and TPRM best practices to clients across various industries.
• Collaborate with cross-functional teams to identify areas of improvement in governance, risk management, and compliance frameworks.
• Develop customized solutions using ISO 27001/ISO 2 standards for client needs.

Job Requirements :

• 5-11 years of experience in GRC consulting or a related field.
• Strong understanding of NIST CSF, ISAE 3402/ISAE 3402e standards.
• Experience conducting risk assessments, developing mitigation plans, and implementing controls.