GRC Consultant

GRC Consultant (Governance Risk & Compliance)

Contract 3 Months Remote 3 Days per Week 500600 per day

Build a compliance function from the ground up.

Were partnering with an ambitious software business thats experiencing significant growth and preparing to onboard several major enterprise clients. With that growth comes increasing scrutiny around governance security and compliance and theyre looking for an experienced GRC Consultant to build a scalable compliance framework that will support the business for years to come.

This isnt a box-ticking exercise.

Youll be embedded within the team working closely with senior stakeholders to understand the business identify gaps implement best practices and create a pragmatic compliance function that actually works.

Following the initial engagement theres a strong opportunity to continue supporting the business on a retained long-term basis.

What youll be doing

Youll take ownership of the companys Governance Risk & Compliance capability including:

Reviewing the current compliance landscape and identifying gaps
Building a practical compliance framework across the business
Leading PCI DSS compliance initiatives
Developing and improving GDPR processes and documentation
Supporting security standards such as ISO 27001 SOC 2 and/or Cyber Essentials
Creating policies procedures and governance documentation
Building and maintaining risk registers
Preparing the business for future audits and assessments
Managing client security questionnaires and compliance requests
Tracking ongoing compliance requirements renewals and evidence
Coordinating external security assessments and penetration testing where required
Advising leadership on evolving compliance and regulatory requirements

What were looking for

Were looking for someone who has genuinely done this before.

Youll be comfortable coming into a growing technology business understanding what exists today and creating a practical roadmap to get everything where it needs to be.

Ideally youll have experience with:

Governance Risk & Compliance (GRC)
PCI DSS
GDPR
ISO 27001 SOC 2 and/or Cyber Essentials
Security governance and audit preparation
Policy creation and documentation
Risk management frameworks
Working independently with multiple stakeholders
Supporting SaaS or technology businesses

Nice to have

Experience with Point of Sale (POS) compliance
Knowledge of French compliance or regulatory requirements
Experience supporting businesses operating across multiple European markets

Why this role

This client could engage a consultancy.

Instead they want an experienced independent consultant wholl become part of the team build relationships with stakeholders and leave behind a compliance framework that scales with the business.

If you enjoy taking ownership solving problems and making a visible impact this is the kind of engagement where youll genuinely shape how a company approaches governance and compliance.

The Details

Contract: Initial 3-month engagement
Commitment: Approximately 3 days per week
Rate: 500600 per day
Location: Hybrid/Remote
Start: ASAP
Potential for ongoing retained work following the initial project

If youre an experienced GRC Consultant looking for a contract where you can make a genuine impact - not simply maintain existing processes - wed love to hear from you.