Senior GRC Consultant - Contract

Deliver

• Own delivery for standard-framework engagements: ISO 27001 (implementation & surveillance), SOC 2 Type I/II readiness, GDPR, PCI DSS compliance programs, gap assessments, control/check mapping, internal audits, policy reviews, audit readiness support.
• Run multiple concurrent client engagements to a consistent quality bar without close supervision.

Build reusable IP

• Maintain and evolve templates, control-mapping libraries, workshop agendas, and QA rubrics for standard frameworks; keep them current as frameworks revise (ISO 27001:2022 transition-type updates, SOC 2 trust criteria changes, GDPR enforcement guidance).
• Extend the library opportunistically to adjacent frameworks (HIPAA, PCI DSS, ISO 42001) as demand grows.

Own commercial outcomes

• Define pricing/packaging for standard-framework engagements (fixed-fee tiers, retainer options).
• Own utilization, margin, and delivery forecasting for your own engagement book.
• Partner with Sales/SE/CS to attach and renew standard-framework services; support deal conversion where technical validation is needed.

AI-enabled productization

• Build and maintain AI-assisted playbooks for standard frameworks (gap assessment, control mapping, internal audit checklists).
• Define structured input forms/checklists so juniors or AI-assisted workflows produce consistent first-draft output.
• Set QA guardrails: mandatory source inputs, validation steps, human approval gates.

Quality & risk

• Establish acceptance criteria and review checkpoints for deliverables.
• Flag scope creep early; escalate ambiguous liability questions rather than absorbing them silently.