Senior Governance, Risk, and Compliance Consultant

Job overview

The Senior Governance, Risk, and Compliance Consultant is a fully remote, long-term contractor role with a full-time schedule aligned to Pacific Time. The posting does not specify compensation. The consultant supports a cybersecurity and compliance consulting client that helps technology companies build and strengthen security and compliance programs. The role leads audit readiness, compliance program development, and risk management across multiple client engagements. It owns framework work from scoping and evidence collection through gap analysis, remediation guidance, and audit support, while advising client leaders and coordinating with auditors and internal subject matter experts.

What you'll do

• Lead readiness engagements for SOC 2 Type I/II, ISO 27001, HIPAA, state privacy regulations, and UK/EU GDPR
• manage GRC platforms such as Vanta or Drata and maintain compliance monitoring and evidence
• conduct formal risk assessments using frameworks such as NIST 800-30
• design and implement GRC programs, policies, controls, risk processes, and evidence collection
• perform internal audits
• manage vendor security questionnaires
• lead client meetings and status updates
• produce policies, procedures, risk registers, control matrices, evidence packages, and assessment reports.

What we're looking for

Skills & competencies

senior grc consultant

scaleup

fully remote

long-term contractor

full-time schedule

pacific time

soc 2

iso 27001

hipaa

gdpr

nist 800-30

cybersecurity compliance

Work arrangement

• Weekend coverage required

Why this role

Fully remote, long-term engagement with significant autonomy, direct client exposure, and ownership of engagements from start to finish; the posting describes contractor employment.

About the employer

ScaleUp is hiring for this role. Industry: All Other Professional, Scientific, and Technical Services. Sector: 54.