> Markdown version of [/jobs/ext/740070-information-security-grc-consultant](https://www.wearedevelopers.com/jobs/ext/740070-information-security-grc-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security GRC Consultant

- **Company:** Serenity Info Tech, Inc.
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Contract:** Temporary contract
- **Skills:** Cyber Security, PCI Data Security Standards, Information Security Management System
- **Published:** June 29, 2026
- **Apply:** https://www.dice.com/job-detail/359f65a4-6a48-41ea-bd64-c598146ca1a1

## About the Role

Required skills (must include years of experience, in order of importance)

 * 10+ Years of Experience in Information Security and Compliance.
 * 2+ Years of Experience with security audits based on a standard control set as an auditor or responding information system security officer
 * Must Have a Strong Working Knowledge of NIST 800-53 (2 Years of Experience)
 * Prior Experience POA&M or CAP.
 * Strong Communication Experience.
 * Experience With Using A GRC Tool (Archer or Similar) (3 Years of Experience)

Preferred Skills (Rank in order of I

 * Have completed an information security plan or system security plan notebook.
 * Simultaneously, manage multiple infosec work efforts.
 * Knowledge of IRS 1075, HIPAA, CJIS, MARS-E and/or PCI-DSS.
 * Government sector experience

## Description

This position with be perform duties as part of DIS execution of its responsibilities under the statewide information security program. DIS Responsibilities include:

 * Supporting agencies during their development of the information security program with direct tactical implementation assistance.
 * Developing and tracking agency information security implementation plans.
 * Interview administrators, managers and third parties to aid in development of program artifacts.
 * Ensuring high-level assessments of agencies infosec work to ensure progress is made.
 * Providing high-level analysis of process and procedures work to ensure compliance with state standards.

Daily Duties / Responsibilities: Duties include, but are not limited to:

 * Interviewing business and technical owners to determine policies and procedures used for each agency process.
 * Developing and tracking infosec implementation plan progress.
 * Documenting information gathered during both interviews and
 * Document reviews to assist with developing formal process and procedures.
 * Assessing agency documentation to ensure adequate approaches are used to comply with controls.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Communicate efficiently with Software Architecture Diagrams](https://www.wearedevelopers.com/videos/379-communicate-efficiently-with-software-architecture-diagrams)
- [GitOps keeps focus on apps, not on infrastructure](https://www.wearedevelopers.com/videos/182-gitops-keeps-focus-on-apps-not-on-infrastructure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [11 Best Practices For PHP Security](https://www.wearedevelopers.com/magazine/90-11-best-practices-for-php-security)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)