> Markdown version of [/jobs/ext/537711-grc-consultant](https://www.wearedevelopers.com/jobs/ext/537711-grc-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Consultant

- **Company:** NATIONMIND LLC
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $79,040.0 - $83,200.0
- **Contract:** Temporary contract
- **Skills:** Data Analysis, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Data Security, RSA (Cryptosystem), Software Security, Generative AI, CIS Benchmarks
- **Published:** June 13, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=16bbfc418b970bf2

## About the Role

Do you have experience in Information security compliance?, Do you have a Bachelor's degree?, * RSA Archer Engage

 * Cyber Security
 * GRC (Governance, Risk & Compliance)
 * Data Security
 * Information Security

Experience Required

 * 8-10 years of relevant experience, * Bachelor's degree in a relevant field or equivalent professional experience in information security, risk, audit, or compliance.
 * 5-8 years of experience in information security, GRC, or security assessment/audit roles.
 * Hands-on experience with RSA Archer, particularly Product Security Assessment or similar assessment modules.
 * Strong working knowledge of security frameworks and standards such as NIST, ISO 27001, CIS Controls, and COBIT.
 * Understanding of risk analysis, assessment, treatment, and management methodologies.
 * Demonstrated practical experience using Generative AI tools for data analysis, content review, or workflow automation in a professional security context.
 * Excellent analytical skills with the ability to parse complex assessment data and produce clear, prioritized recommendations.
 * Strong communication skills suitable for both technical and leadership audiences.
 * Ability to work independently and manage a workstream end-to-end with minimal oversight.

## Description

We are seeking an experienced GRC Consultant with expertise in Information Security, Cyber Security, Data Security, and RSA Archer to support governance, risk, and compliance initiatives., * Perform governance, risk, and compliance assessments and security reviews.

 * Utilize RSA Archer for security assessment and risk management activities.
 * Conduct risk analysis, assessment, treatment, and mitigation planning.
 * Work with security frameworks and compliance standards including NIST, ISO 27001, CIS Controls, and COBIT.
 * Analyze assessment findings and provide prioritized recommendations to stakeholders.
 * Leverage Generative AI tools for data analysis, content review, and workflow automation where applicable.
 * Collaborate with technical and business teams to support information security and compliance initiatives.
 * Communicate findings, risks, and recommendations effectively to technical teams and leadership.


## Related Videos

- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Your imaginations is (no longer) the limit: how Generative AI empowers people to be creative](https://www.wearedevelopers.com/videos/741-your-imaginations-is-no-longer-the-limit-how-generative-ai-empowers-people-to-be-creative)
- [Web-based Information Visualization](https://www.wearedevelopers.com/videos/84-web-based-information-visualization)
- [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)