Governance Risk and Compliance - Consultant

As a GRC Analyst, you will support the organization’s Governance, Risk, and Compliance initiatives by performing risk assessments, control testing, and ensuring adherence to NIST Cybersecurity Framework (CSF) and ISO 27001standards

•Conduct risk assessments for systems, applications, and third-party vendors aligned with ISO 27001 and NIST CSF. •Evaluate and validate the effectiveness of security controls and recommend mitigations for identified risks. •Perform gap assessments against regulatory frameworks and prepare risk treatment plans. •Support the development and maintenance of the risk register, policies, and procedures. •Participate in audits and assist in evidence collection for compliance requirements. •Provide regular risk reports and metrics to senior management and stakeholders. •Collaborate with technical teams to ensure remediation plans are implemented effectively.

Soft Skills:

• Strong client interaction skills, both written and verbal
• Highly Fluent in English – verbal and written
• Critical thinking, including questioning, digestion, thought process, and documentation of same.
• Acute attention to detail.
•  Exceptional time management, including speed and ownership to drive closure and seek solutions.
• Ability to effectively manage competing priorities.

Additional Qualification: 

• Prior consulting experience with big 4 or large clientele is preferable.