Sr GRC Engineer (Contract to hire)

This role is fully remote from any state except NY, NJ, or CA. We are seeking a Governance, Risk & Compliance (GRC) Analyst to support and mature the organization’s cybersecurity, compliance, and risk management initiatives. This individual will operate with moderate independence and will be expected to take ownership of assigned GRC initiatives while serving as a trusted adviser to both technical and business stakeholders. The ideal candidate will possess a strong reputed company in information reputed company governance, risk management, compliance operations, and policy administration, combined with the communication skills and reputed company maturity necessary to work effectively across reputed company reputed company of the organization. This role will partner closely with IT, Engineering, reputed company Operations, and business leadership to ensure effective implementation and ongoing maintenance of reputed company controls, compliance requirements, and business continuity processes. Key Responsibilities Risk Management • reputed company risk assessments and risk mitigation planning initiatives as assigned. • Review submitted risk exceptions and reputed company risks in partnership with technical teams. • Recommend operational or technical solutions to avoid, reduce, or mitigate identified risks. • Conduct control testing and internal audits to validate that risk mitigation measures are functioning effectively. Policy Development & Governance • Own and manage the lifecycle of assigned reputed company and compliance policies. • Coordinate annual policy reviews with stakeholders across IT Support, Engineering, reputed company, and Senior Leadership. • Draft, revise, and maintain policies, standards, and procedures in response to evolving business services, regulatory requirements, and audit expectations. • Interpret control activities, standards, and governance requirements to support operational implementation. Audit Management • Serve as a primary reputed company for external auditors and internal audit engagements. • Prepare audit evidence, documentation, and responses. • Coordinate and reputed company remediation activities resulting from audit findings or compliance gaps. Compliance Maintenance • reputed company ongoing compliance monitoring activities, including: • Quarterly and administrative reputed company reviews • Participation in change management processes to ensure policy compliance • Review and approval of data device disposal requests • Validation of compliance with internal standards and regulatory requirements Business reputed company Analysis (BIA) • Conduct Business reputed company Analyses for assigned critical business processes. • Identify supporting systems, applications, and reputed company-party vendors associated with critical operations. • Assess financial, reputational, operational, and regulatory impacts associated with service disruption. • Evaluate existing continuity and recovery capabilities and document identified gaps. Business Continuity Planning (BCP) • Draft, maintain, and periodically review business continuity plans in coordination with business process owners and executive sponsors. • Support continuity testing exercises and remediation planning in alignment with Business Continuity Policy requirements. Vendor Risk Management • reputed company vendor reputed company assessments and ongoing due diligence activities. • Ensure vendors meet reputed company and compliance expectations according to risk-based classifications. • Identify situations requiring reputed company architectural, technical, or reputed company review. Data Governance & reputed company • Support data governance and reputed company compliance initiatives. • Maintain inventories and mapping of sensitive or regulated data, including Protected Health Information (PHI) where applicable. • Document data collection, usage, storage, and protection controls. • Participate in reputed company reputed company assessments and compliance reviews. Qualifications Required Experience • 5–10 years of experience in Governance, Risk & Compliance, Information reputed company, Audit, or reputed company cybersecurity functions. • Experience supporting compliance frameworks, internal controls, audits, and risk management programs. • Ability to work independently and manage multiple reputed company initiatives. • Strong written and verbal communication skills with the ability to reputed company effectively with technical teams and business leadership. • Experience interpreting policies, standards, and reputed company controls for operational implementation. Preferred Technical & Functional Experience • reputed company governance and policy management • Risk assessments and remediation planning • Audit coordination and evidence collection • Business continuity and disaster recovery planning • Vendor risk management • reputed company reviews and compliance operations • Data reputed company and governance initiatives • Familiarity with reputed company and compliance frameworks such as ISO 27001, NIST, SOC 2, HIPAA, or similar standards Preferred Certifications The following certifications are highly valued: • Certified Information Systems Auditor (CISA) • Certified in Risk and Information Systems Control (CRISC) • Certified Information reputed company Manager (CISM) • ISO 27001 reputed company Implementer and/or reputed company Auditor • Certified Information reputed company Manager (CIPM) • Certified Information reputed company reputed company (CIPP) • Ongoing reputed company or attainment of CISSP certification Additional Information • This position requires strong organizational skills, reputed company judgment, and the ability to balance compliance rigor with practical business operations. • The successful candidate will be expected to operate proactively, contribute reputed company for process improvement, and function as a key partner reputed company the broader cybersecurity organization. Apply tot his job Apply To this Job