> Markdown version of [/jobs/ext/4608866-cybersecurity-grc-consultant](https://www.wearedevelopers.com/jobs/ext/4608866-cybersecurity-grc-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity & GRC Consultant

- **Company:** Kforce Inc.
- **Location:** Salt Lake City, UT, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Cyber Security, Identity and Access Management, PCI Data Security Standards, Software Vulnerability Management, IT General Controls (ITGC), National Institute of Standards and Technology Cybersecurity Framework
- **Published:** November 6, 2026
- **Apply:** https://www.kforce.com/find-work/search-jobs/#/detail/MTY5Nn5XUUd-MjE5MzQ2MVQxfjk5/

## About the Role

* CISSP, CISM, CRISC, or CISA certification preferred
 * 10+ years of cybersecurity, information security, or technology risk experience
 * Demonstrated success leading both cybersecurity operations and GRC initiatives
 * Strong knowledge of cloud security, IAM, incident response, audits, and regulatory controls
 * Experience working within complex or global enterprise environments

## Description

Kforce has a client in Salt Lake City, UT that is seeking a Cybersecurity & GRC Consultant to evaluate and strengthen a global security and GRC program. This person will assess the current environment, identify critical risks, develop a prioritized roadmap, and lead improvements across security operations, cloud and identity security, regulatory compliance, audit readiness, AI governance, and cyber resilience. Key Responsibilities:

 * Assess cybersecurity maturity and identify control or capability gaps
 * Create and execute a risk-based security improvement roadmap
 * Strengthen incident response, vulnerability management, IAM, cloud security, and third-party risk
 * Improve alignment with NIST CSF, ISO 27001, SOX ITGC, PCI DSS, and applicable privacy regulations
 * Establish security controls for generative AI, automated agents, and non-human identities
 * Track remediation efforts and communicate progress and material risk to executive leadership