Senior GRC Consultant
Posted 2026-06-26Summary
We are seeking a highly experienced Information Security & Compliance Consultant with deep
hands-on experience implementing ISO 27001, SOC2, PCI-DSS, and HIPAA for startups and U.S.-
based clients.
The ideal candidate has independently led end-to-end compliance programs, understands auditor
expectations, and can guide technical and non-technical teams through full implementation and
audit readiness. Experience with Vanta and Drata is a must.
You must operate effectively with minimal supervision, lead teams, interact directly with clients, and
support both advisory and audit-prep engagements. Preference will be given to candidates willing to
join full time and work in IST or EST time zones.
✅ Key Responsibilities
Lead end-to-end implementation of ISO 27001, SOC 2, PCI-DSS, and HIPAA frameworks for startups
and SMBs.
Act as the primary consultant for clients—owning roadmap creation, gap assessments, and
remediation planning.
Prepare necessary documentation: policies, procedures, SOPs, risk assessments, evidence collection,
and audit artifacts.
Guide technical and business teams through compliance activities and remediation work.
Conduct internal audits aligned with ISO 27001:2022 and SOC2 Trust Service Criteria.
Manage external auditors and ensure clients are fully audit-ready.
Lead customer meetings and coordinate deliverables while tracking progress on compliance
platforms.
Work hands-on with Vanta, Drata, and similar GRC automation tools.
Mentor junior team members and ensure quality and consistency across engagements.
Maintain strong knowledge of information security best practices, cloud security, and applicable
regulatory requirements.
✅ Candidate Requirements
ISO 27001 Lead Auditor certification (mandatory).
Mandatory experience implementing: ISO 27001, SOC2, PCI-DSS, HIPAA.
3–4+ years hands-on compliance consulting or audit experience.
Experience working independently with U.S. clients and startups.
Strong knowledge of Vanta and Drata setup, workflows, evidence automation, and integrations.
Ability to lead team members and coordinate with stakeholders.
Excellent communication and documentation skills.
Available for full-time or long-term engagements.