Cybersecurity GRC Consultant
Pubblicato il 01-09-2026 - Scale Up Recruiting Partners in Torino
Hey We’re Scale Up, and our client is looking to hire a Cybersecurity GRC Consultant
Type of Employment: Contractor (Long-term)
Work Modality: 100% Remote
Work Schedule: Full-time
Time Zone: U.S. business hours (with flexibility as needed)
About Our Client
Our client is a fast-growing U.S.-based cybersecurity and compliance consulting startup that partners with technology companies to build, strengthen, and scale their security and compliance programs. Rather than acting as an external vendor, they work as an extension of their clients' teams, providing embedded security leadership, compliance expertise, and operational support across frameworks such as SOC 2, ISO 27001, HIPAA, GDPR, and more.
This is an opportunity to join a small, highly technical team where you'll have significant ownership, direct client exposure, and the chance to shape security programs for innovative startups.
About The Role
As a Senior GRC Consultant, you will lead audit readiness, compliance program development, and risk management across multiple client engagements.
You'll own compliance frameworks end-to-end—from scoping and evidence collection to gap analysis, remediation guidance, and audit support.
This is a senior, client-facing position where you'll independently manage your own engagements while working directly with executive stakeholders and external auditors.
Key Responsibilities
Lead compliance readiness engagements including SOC 2 Type I/II, ISO 27001, HIPAA, U.S. state privacy regulations, and UK/EU GDPR.
Own GRC platforms such as Vanta, Drata, or similar tools, ensuring compliance monitoring remains fully operational and evidence is continuously maintained.
Conduct formal risk assessments using frameworks such as NIST 800-30, translating technical findings into business and compliance risks.
Design and implement complete GRC programs, including policies, control frameworks, risk management processes, and evidence collection.
Perform internal audits, evaluating both control de