Job Description

GRC Consultant

Location: Remote

Duration: 6 months



Experience: 6 10+ years

Role Overview
Support a Controls Modernization engagement by reviewing technology controls and evidence, documenting assessment findings, supporting stakeholder workshops, and contributing to control rationalization and automation roadmaps.

Key Responsibilities

• Review control procedures, evidence, ownership, frequency, and supporting documentation.
• Identify control gaps, duplication, unclear ownership, evidence issues, and rationalization opportunities.
• Support stakeholder workshops, capture decisions/action items, and track validation follow-ups.
• Prepare control rationalization recommendations and updates to the control inventory.
• Identify manual or repetitive controls suitable for automation and support the automation roadmap.
• Develop workpapers, assessment notes, control matrices, findings, and executive-level deliverables.
• Ensure documentation is accurate, complete, consistent, and audit-ready.

Top 3 Required Skills

1. GRC / RSA Archer Hands-on GRC platform experience
2. IT Controls & Control Testing Control/evidence review, risk & control matrices, audit
3. Control Rationalization & Documentation Identifying gaps, duplication, ownership and optimization opportunities

Preferred Experience

• IT Audit, Cybersecurity GRC, Technology Risk, Internal Controls, or Operational Risk.
• Financial services/banking or other regulated-environment experience.
• Strong Excel and PowerPoint skills.
• Knowledge of FFIEC, COBIT , or similar control frameworks.
• Certifications such as CISA, CRISC, CIA, or ISO 27001 Lead Auditor preferred.

Ideal Profile: 6 10+ year GRC/IT Controls professional with strong hands-on Archer , control testing, evidence review, and documentation experience, ideally from a banking or regulated environment.

Job Tags

Similar Jobs