Security GRC Consultant

Overview:
Client is seeking an experienced Security GRC (Governance, Risk, and Compliance) Expert to join our team on a 6-month contract with the potential for a permanent role. This individual will be responsible for leading risk management, internal audits, and ensuring compliance with relevant regulations and frameworks, including HIPAA, NIST, and SEC/SOX. We are looking for a self-starter who can hit the ground running by early October.

Key Responsibilities:

• Lead and manage Client risk management processes, ensuring effective identification, assessment, and mitigation of security risks.
• Conduct internal audits to assess compliance with HIPAA, NIST, SEC/SOX guidelines, and other applicable regulations for public companies.
• Work closely with internal teams to ensure Client governance framework is aligned with industry standards and best practices.
• Leverage expertise in GRC (Governance, Risk, and Compliance) to provide strategic guidance to stakeholders, ensuring ongoing adherence to security and privacy regulations.
• Assist in the implementation and optimization of Onspring, Client's new GRC tool, to enhance overall governance processes.
• Provide clear, concise reports and presentations to senior leadership, translating complex technical requirements into understandable business language.
• Monitor and assess the organization s compliance landscape, providing recommendations for improvements and updates to the GRC framework as necessary.

Qualifications:

• Extensive experience in risk management, internal audits, and compliance within public companies, with a focus on healthcare or similar industries.
• Expert knowledge of HIPAA, NIST cybersecurity framework, and SEC/SOX guidelines.
• Familiarity with GRC tools, particularly On Spring, is highly preferred.
• Excellent verbal and written communication skills; able to translate technical concepts into business-friendly language for executive reporting.
• Strong problem-solving skills and ability to work autonomously in a fast-paced environment.
• Proven ability to collaborate cross-functionally with technical and non-technical teams.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.