GRC Consultant - SOC2

Sectech Solutions; United Kingdom; Remote; GBP 50,000 - 90,000

Job description

Get AI-powered advice on this job and more exclusive features.

REMOTE WORKING (POSSIBLE TRIPS TO MANCHESTER)

SHORT-TERM CONTRACT - DURATION TBC

OUTSIDE IR35

We are seeking a highly skilled Contract GRC Consultant (SOC 2 Specialist) to join our CyberSecurity consultancy client on a temporary basis.

In this role, you will support a Fintech organisation in developing, implementing, and maintaining Governance, Risk, and Compliance (GRC) frameworks with a focus on SOC 2 compliance. You will work closely with the client to assess risks, design controls, and ensure they meet the necessary security and regulatory requirements.

Key Responsibilities:

• Lead SOC 2 readiness assessments and audits, providing expert guidance on compliance.
• Develop and implement security controls, policies, and procedures aligned with SOC 2 Trust Service Criteria.
• Conduct risk assessments and gap analyses to identify areas for improvement.
• Collaborate with cross-functional teams to enhance security posture and compliance efforts.
• Prepare and review SOC 2 audit documentation, ensuring alignment with best practices.
• Provide training and advisory support to clients on GRC best practices.
• Stay up to date with evolving compliance standards and industry trends.

Qualifications & Experience:

• Proven experience as a GRC Consultant, SOC 2 Specialist, or similar role.
• In-depth knowledge of SOC 2 compliance, audit processes, and Trust Service Criteria.
• Experience working with UK-based clients that trade in the USA.
• Familiarity with security frameworks such as ISO27001, NIST, and GDPR is a plus.
• Strong understanding of risk management principles and security best practices.
• Excellent communication and stakeholder management skills.
• Relevant certifications such as CISA, CISSP, CRISC, or CISM are highly desirable.

Seniority level

Not Applicable

Employment type

Contract

Job function

Information Technology

Industries

IT Services and IT Consulting