Senior GRC Consultant

Senior GRC Consultant

Location : New Jersey (Twice or Thrice a week visit to Midtown Manhattan)

Start Date : ASAP

Role Summary

The Senior GRC Consultant will support the Client's Governance, Risk, and Compliance (GRC) function with a focus on audit readiness, compliance program execution, and third-party risk management (TPRM). The role requires solid hands-on experience in security audits, regulatory compliance, and vendor risk processes, with the ability to engage confidently with internal stakeholders, external auditors, and third-party vendors.

Key Responsibilities

Audit & Compliance

• Coordinate and support external audits and regulatory assessments (SOC 1, SOC 2, SOX 404, ISO, NIST, HITRUST, FedRAMP, StateRAMP).
• Conduct evidence collection, validation, and mapping against control requirements.
• Support IT General Controls (ITGC) and application control testing.
• Develop and maintain compliance dashboards, audit documentation, and management reports.
• Facilitate meetings with external auditors to review scope, evidence, findings, and reports.

Third-Party Risk Management (TPRM)

Advisory Support

Required Qualifications

Education & Certifications

Nice-to-Have