> Markdown version of [/jobs/ext/3677289-grc-consultant](https://www.wearedevelopers.com/jobs/ext/3677289-grc-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Consultant - **Company:** OpenKyber LLC - **Location:** Atlanta, GA, United States - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Cloud Computing, Cloud Computing Security, Cyber Security, RAID, Identity and Access Management, Machine Learning, PCI Data Security Standards, Security Information and Event Management, Google Cloud, Office365, Large Language Models, Software Security, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, RSA Archer Platform, CIS Benchmarks, AI Co-pilot, Servicenow - **Published:** October 10, 2026 - **Apply:** https://www.careerjet.com/jobad/usab78404f21cacf6f435709f2964a049d ## About the Role * Bachelor's or Master's degree in Computer Science, Information Security, Risk Management, or related field. * Proven experience in Program/Project Management within GRC, Cybersecurity, or Infrastructure domains. * Demonstrated experience coordinating initiatives across multiple technical groups such as Cybersecurity, AppSec, Cloud Infra (AWS/Google Cloud Platform), IAM, and M365/Modern Workplace. * Working knowledge of AI/ML concepts and their application to security and compliance use cases (e.g., anomaly detection, predictive risk analytics, generative AI for policy/control analysis) distinguishing these from traditional scripted or rule-based automation. * Familiarity with common GRC frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2, PCI-DSS, CIS Benchmarks). * Strong understanding of cloud infrastructure security (AWS, Google Cloud Platform), identity/access management principles, and enterprise collaboration platforms (M365). * Excellent stakeholder management, executive communication, and presentation skills. * Proven ability to manage multiple concurrent, cross-functional programs in a fast-paced, matrixed environment. * PMP, PgMP, CISM, CISA, or CRISC certification is a plus. Preferred / Nice-to-Have * Prior experience piloting or scaling AI-based security/compliance tools (e.g., AI-driven SIEM/SOAR enhancements, AI copilots for GRC platforms, LLM-based control testing). * Experience with GRC tooling (e.g., ServiceNow GRC, Archer, MetricStream) and cloud-native security posture management (CSPM) tools. * Exposure to Agile/Scrum delivery methodologies for running technical rollout programs. ## Description Department Governance, Risk & Compliance (GRC) / Infrastructure Security Reports To Director / Head of GRC (Infrastructure & Security) Location Santa Clara, California Employment Type Contract Experience Level 14+ years (Program/Project Management in Security, Risk, or Infra domains) About the Role We are looking for an experienced Program Manager to drive Governance, Risk & Compliance (GRC) initiatives across our Infrastructure landscape. This role is central to orchestrating cross-functional programs that span Cybersecurity, Application Security, Cloud Infrastructure (AWS/Google Cloud Platform), Identity & Access Management (IAM), and Modern Workplace (M365) teams. A key focus of this role is driving the adoption and rollout of AI-powered capabilities moving beyond traditional rule-based automation to strengthen risk management, compliance monitoring, and security operations at scale. Key Responsibilities * Cross-Functional Program Coordination Serve as the primary program-level point of coordination across multiple stakeholder groups, including Cybersecurity, Application Security, AWS Infrastructure, Google Cloud Platform Infrastructure, IAM, and M365 teams, to drive alignment on GRC initiatives. * Build and maintain strong working relationships with engineering, security, and platform leads to ensure program objectives are understood, prioritized, and executed consistently across teams. * Facilitate cross-team working sessions, steering committees, and governance forums to resolve dependencies, blockers, and conflicting priorities. * AI-Driven Initiative Rollout Lead the planning, rollout, and adoption of AI-based capabilities (e.g., ML-driven risk scoring, intelligent anomaly detection, AI-assisted compliance monitoring, LLM-based policy/control analysis) across infrastructure and security domains distinct from traditional rule-based or scripted automation. * Partner with data science, security engineering, and platform teams to translate AI/ML capabilities into practical GRC use cases such as automated risk detection, predictive compliance analytics, and intelligent control testing. * Track emerging AI capabilities relevant to GRC and infrastructure risk management, and evaluate their applicability for the organization's control environment. * Own the end-to-end rollout lifecycle for AI initiatives: use-case definition, pilot design, stakeholder buy-in, phased deployment, and post-rollout measurement of risk/compliance impact. * Governance, Risk & Compliance Ownership Maintain and evolve the GRC roadmap for infrastructure, ensuring initiatives map to applicable regulatory, audit, and internal control requirements. * Track risk posture, control gaps, and remediation plans across cloud (AWS/Google Cloud Platform), identity (IAM), endpoint/collaboration (M365), and application security domains. * Support internal and external audit engagements by coordinating evidence collection, control walkthroughs, and remediation tracking across stakeholder teams. * Program & Delivery Management Define program charters, milestones, RAID logs, and success metrics for each initiative; report progress to senior leadership and steering committees. * Manage program budgets, resource allocation, and timelines across multiple concurrent workstreams. * Proactively identify risks and dependencies across teams and drive mitigation plans to avoid delivery slippage. * Reporting & Stakeholder Communication Develop executive-level dashboards, status reports, and risk heat-maps summarizing program health and AI-initiative rollout progress. * Communicate technical AI/automation concepts in business-friendly terms to non-technical stakeholders and leadership., * Seamless coordination across Cybersecurity, AppSec, AWS/Google Cloud Platform Infra, IAM, and M365 teams with minimal escalations. * Successful, measurable rollout of AI-based GRC capabilities that demonstrably improve risk detection and compliance efficiency over legacy automation approaches. * A mature, well-governed program cadence with clear visibility for leadership on risk, compliance, and initiative progress. Thanks & Regards, OpenKyber - Team Lead Phone # For applications and inquiries, contact:hirings@openkyber.com