GRC Engineer

Immediate need for a talented GRC Engineer. This is a 06+months contract opportunity with long-term potential and is located in Miami ,FL (Hybrid). Please review the job description below and contact me ASAP if you are interested.

• Certifications: ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM, CISSP, or CCSP. \n

• Experience in energy, critical infrastructure, or data center environments. \n

• Familiarity with OT/ICS frameworks (IEC 62443, NIST SP 800-82) or NERC CIP. \n

• Exposure to SEC cybersecurity disclosure rules and board-level reporting. \n

• 6+ years in security GRC, compliance engineering, or IT audit, including 2 years of hands-on technical work (automation, integrations, scripting). \n

• Experience operating ISO 27001:2022 through a certification or surveillance audit, and SOC 2 audit experience with Type II evidence. \n

• Practical knowledge of SOX ITGCs and evidence expectations at a publicly traded company. \n

• Hands-on administration of Drata or a comparable platform (Vanta, Secureframe, etc.). \n

• Scripting experience in Python, PowerShell, or similar, with comfort in REST APIs for evidence collection. \n

• Strong written communication skills for diverse audiences, including engineers and executives. \n

Pay Range: $50 - $60/hour. Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location)., n \n

• Operate the ISO 27001:2022 ISMS, including internal audits and management reviews. \n

• Run SOC 2 scoping, control mapping, and auditor walkthroughs. \n

• Maintain a control framework mapped across ISO 27001, SOC 2, SOX ITGC, NIST CSF 2.0, and NIST SP 800-53 Rev. 5. \n

• Administer Drata, including control library management and integrations with various systems. \n

• Stand up the cyber risk program, defining methodologies and building the initial risk register. \n

• Manage the vendor lifecycle in Drata, including assessments and ongoing monitoring. \n

• Draft and manage the policy lifecycle, ensuring compliance and risk metrics are reported to leadership. \n

\n

\n

Our client is a leading Financial Industry, and we are currently interviewing to fill this and other similar contract positions. If you are interested in this position, please apply online for immediate consideration.