Note: The job is a remote job and is open to candidates in USA. RegalSentry is a cybersecurity and compliance firm seeking senior Information Security Consultants for contract positions leading security and compliance programs. The role owns compliance programs end to end, administers GRC platforms, leads audit and stakeholder activities, manages third-party risk, prepares executive reporting, and oversees documentation and analyst work product.
Responsibilities
- Own compliance programs end to end: scoping, gap assessment, remediation, audit
- Administer and optimize the GRC platform: connectors, monitoring tests, evidence mapping, personnel tracking
- Lead control walkthroughs, evidence-gathering interviews, and audit-readiness reviews with stakeholders
- Run third-party risk management: vendor reviews, questionnaires, risk write-ups
- Prepare executive reporting: status summaries, QBR material, leadership updates
- Review analyst work product and raise the bar on it
- Generate, update, review, manage, and maintain documentation including, but not limited to, policies, procedures, standards, plans, and diagrams
Skills
- 10+ years in security, GRC, or compliance with hands-on work
- Deep experience with one or more frameworks (SOC 2, ISO 27001, NIST CSF, or CMMC), including full audit cycles carried end to end
- Hands-on administration of a GRC platform (connectors, tests, evidence). Tooling could include Drata, Vanta, Secureframe, ZenGRC, or other provider
- CISSP or an equivalent senior certification
- Comfortable leading interviews and meetings with auditors, executives, and internal teams
- Detailed note taker
- Familiar using Frontier AI models, embedded or through chat assist
- ISO 27001 Lead Auditor or Lead Implementer
- CISA, CISM, or CRISC
- CCP or CCA (CMMC)
- GRC platform vendor certification
- Experience standing up a compliance program from zero
- Bachelors or Master degree in IT, Cybersecurity, Development, or other technical field
Benefits
- Remote work
- C2C opportunity available
Company Overview