GRC Lead Consultant

GRC Lead Consultant (Future Head of GRC)

100% Remote Working – US candidates only.

This is a long-term contract opportunity for a Lead GRC Consultant, with future plans to transition into a permanent role as the Head of GRC.

US Citizens only – Visa's / Sponsorship will not be accepted for this role.

Overview

Lead GRC Consultant role focused on hands‑on assessment and advisement for PCI (SAQ‑D scope) and SOX controls, with a clear growth path into the Head of GRC position. The ideal candidate will be both a practitioner and strategic leader, capable of maturing the GRC program, enhancing governance practices, and driving automation across compliance processes.

Key Responsibilities

• Lead assessment and advisory efforts for PCI (SAQ‑D) and SOX controls.
• Provide strategic direction and hands‑on support for a large PCI compliance project covering two major applications.
• Evaluate and strengthen IT and Cyber control effectiveness across multiple business units.
• Develop, document, and maintain IT and Cyber Control Playbooks to standardize control implementation and assessment.
• Align governance and controls to industry‑standard frameworks (e.g., NIST, CIS, ISO 27001).
• Support and mature governance functions across risk, compliance, and security domains.
• Lead and mentor a GRC team of 20, evolving processes and structure to support scalability and maturity.
• Identify opportunities to automate compliance and risk management processes to improve efficiency and accuracy.

Qualifications

Seniority level

Employment type

Job function

Industries

#J-18808-Ljbffr