> Markdown version of [/jobs/ext/3976394-senior-grc-consultant](https://www.wearedevelopers.com/jobs/ext/3976394-senior-grc-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior GRC Consultant

- **Company:** SCALEUP, LLC
- **Location:** Los Angeles, CA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cloud Computing Security, Cyber Security, Continuous Integration, Identity and Access Management, Internet Security, RSA Archer Platform, ISO/IEC 27002
- **Published:** October 27, 2026
- **Apply:** https://www.careerbuilder.com/job-details/senior-grc-consultant-los-angeles-ca--607909fc-fe94-4379-baaf-9ee7953308e0

## About the Role

* 5-7+ years of hands-on experience in GRC, compliance, or information security audits.
 * Previous consulting or professional services experience managing multiple client engagements.
 * Strong expertise with both:
 + SOC 2 Type I & II
 + ISO 27001 / ISO 27002
 * Experience with one or more additional frameworks such as GDPR, CCPA/CPRA, or HIPAA.
 * Experience building compliance programs from the ground up.
 * Ability to map controls across multiple compliance frameworks.
 * Solid technical understanding of cloud security, IAM, CI/CD pipelines, and security controls.
 * Excellent documentation and technical writing skills.
 * Professional-level English with confidence leading meetings with U.S.-based clients.

Nice to Have

 * Experience working directly with external auditors.
 * Hands-on experience implementing GDPR or U.S. privacy compliance programs.
 * Knowledge of ISO 42001 (AI Management Systems).
 * Certifications such as:
 + CISA
 + CISM
 + CRISC
 + ISO 27001 Lead Auditor
 + ISO 27001 Lead Implementer
 + or equivalent.

## Description

As a Senior GRC Consultant, you will lead audit readiness, compliance program development, and risk management across multiple client engagements. You'll own compliance frameworks end-to-end-from scoping and evidence collection to gap analysis, remediation guidance, and audit support.

This is a senior, client-facing position where you'll independently manage your own engagements while working directly with executive stakeholders and external auditors., * Lead compliance readiness engagements including SOC 2 Type I/II, ISO 27001, HIPAA, U.S. state privacy regulations, and UK/EU GDPR.

 * Own GRC platforms such as Vanta, Drata, or similar tools, ensuring compliance monitoring remains fully operational and evidence is continuously maintained.
 * Conduct formal risk assessments using frameworks such as NIST 800-30, translating technical findings into business and compliance risks.
 * Design and implement complete GRC programs, including policies, control frameworks, risk management processes, and evidence collection.
 * Perform internal audits, evaluating both control design and operational effectiveness while preparing audit-ready findings.
 * Manage vendor security questionnaires, coordinating with internal subject matter experts and maintaining reusable knowledge bases.
 * Build strong relationships with client leadership, lead recurring meetings, provide status updates, and manage expectations throughout each engagement.
 * Produce high-quality client deliverables including policies, procedures, risk registers, control matrices, evidence packages, and assessment reports.