GRC Specialist

**Temporary position - 12-month contract*

2-5+ years of experience in Governance, Risk & Compliance (GRC), Information Security, or Compliance.

Proven experience in Third-Party Risk Management (TPRM) / Supply Chain Security.

Hands-on experience leading or supporting ISO 27001 and/or SOC 2 audits and compliance programs.

Strong knowledge of security and privacy frameworks, including ISO 27001, SOC 2, NIST, GDPR, and HIPAA.

Ability to work independently, manage multiple workstreams, and collaborate with cross-functional teams.

Strong communication skills with both technical and business stakeholders.

AI-native mindset with experience using AI tools to improve productivity and streamline compliance processes.

Requirements:

Hands-on experience leading or supporting ISO 27001 and/or SOC 2 audits and compliance programs.

Strong knowledge of security and privacy frameworks, including ISO 27001, SOC 2, NIST, GDPR, and HIPAA.

Ability to work independently, manage multiple workstreams, and collaborate with cross-functional teams.

Strong communication skills with both technical and business stakeholders.

AI-native mindset with experience using AI tools to improve productivity and streamline compliance processes.