> Markdown version of [/jobs/ext/615815-senior-grc-consultant](https://www.wearedevelopers.com/jobs/ext/615815-senior-grc-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior GRC Consultant - **Company:** MatchPoint Solutions - **Location:** Maryland Heights, MO, United States (Remote available) - **Experience:** Expert - **Salary:** $15,000.0 - $30,000.0 - **Contract:** Permanent contract - **Skills:** Systems Engineering, Software as a Service, Data Retention, Disaster Recovery, Data Processing, CIS Benchmarks - **Published:** June 23, 2026 - **Apply:** https://www.careerjet.com/jobad/usd88aabcd8303a20f8f7bb4ad0464f812 ## About the Role * Knowledge of FAA regulations, certification evidence, and airworthiness/maintenance records * Expertise in data retention, records management, and evidence preservation * Understanding of backup and recovery controls, including immutability and long-term retention * Familiarity with frameworks such as: * NIST CSF, NIST SP 800-53 / 800-171 / 800-161 * ISO 27001, CIS Controls * Experience with cloud, SaaS, and engineering/manufacturing systems * Awareness of ITAR, EAR, CUI, and restricted data handling requirements Preferred Qualifications * Prior experience supporting aviation certification or regulatory audits (FAA/NTSB) * Hands-on exposure to PLM, QMS, source code repositories, or engineering systems * Experience designing or validating backup/retention strategies in regulated environments * Ability to produce executive-ready deliverables and present findings to senior stakeholders * Strong consulting mindset with focus on practical, actionable recommendations ## Description * Review policies, standards, system inventories, retention schedules, and backup configurations * Assess recovery procedures, architecture, and compliance documentation * Identify critical systems and data supporting engineering, manufacturing, operations, and regulatory evidence * Validate that retention and backup practices are: * Documented and consistently applied * Recoverable, auditable, and supported by evidence * Evaluate use of immutable or tamper-resistant retention where required * Identify gaps in retention coverage, backup scope/frequency, recovery testing, monitoring, and governance * Deliver a concise findings report with prioritized remediation recommendations Requirements * Strong experience conducting GRC assessments, compliance reviews, and control gap analyses * Background in aviation, aerospace, defense, or other regulated/safety-critical industries, Find your calling at Mercy! Under the direction of the Executive Director of Clinical Performance Acceleration, the Senior Managing Consultant provides strategic leadership, oper… + 2 days ago, Senior Organizational Effectiveness Consultant ? St. Louis, MO (Local Candidates Only) | ? Direct Hire PEG Staffing & Recruiting is partnering with a well-established organizati… + 1 month ago + ## Related Videos - [Implementing continuous delivery in a data processing pipeline](https://www.wearedevelopers.com/videos/73-implementing-continuous-delivery-in-a-data-processing-pipeline) - [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles) - [Architecting the Future: Leveraging AI, Cloud, and Data for Business Success](https://www.wearedevelopers.com/videos/1096-architecting-the-future-leveraging-ai-cloud-and-data-for-business-success) - [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment) - [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives) - [Why and when should we consider Stream Processing frameworks in our solutions](https://www.wearedevelopers.com/videos/1085-why-and-when-should-we-consider-stream-processing-frameworks-in-our-solutions) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)