Jobs → Legal → Governance, Risk & Compliance (GRC) Professional

About the Role We are looking for a senior-level GRC professional to join our team for a 9-month contract-to-hire position. This role requires strong expertise in IT risk management, regulatory compliance, audit support, control testing, and legal/contractual document review. Key Responsibilities • Review legal documents, contracts, agreements, policies, and regulatory requirements • Conduct control testing, walkthroughs, audit evidence review, and control gap assessments • Perform risk assessments, remediation tracking, and audit readiness activities • Map contractual and regulatory obligations to policies, risks, controls, and supporting evidence • Collaborate with Legal, Privacy, Security, Technology, and Internal Audit teams Requirements • 8+ years of experience in GRC, IT risk management, and regulatory compliance • Strong expertise in SOX ITGC, SOC 1, SOC 2, and IT Risk Management • Working knowledge of PCI DSS, NIST, COSO, COBIT, HITRUST, and regulatory compliance • Experience reviewing legal documents, contracts, agreements, policies, and regulatory requirements • Expertise in control testing, walkthroughs, audit evidence review, and control gap assessments • Experience in risk assessments, remediation tracking, and audit readiness • Ability to map contractual and regulatory obligations to policies, risks, controls, and supporting evidence • Familiarity with ServiceNow GRC/IRM, Archer, AuditBoard, or OneTrust • Strong documentation, analytical, research, and stakeholder management skills Preferred Qualifications • Legal, paralegal, or legal operations experience • Experience supporting enterprise GRC programs and external audits • Certifications such as CISA, CRISC, CGRC, CIA, or CISM • Bachelor’s degree in a relevant discipline or equivalent professional experience