Job Description
Job DescriptionWe are looking for a GRC Consultant to support cybersecurity governance, risk, and compliance efforts for a growing organization in Illinois. This contract position with the potential to become permanent is ideal for someone who can bring structure to security programs, guide risk-based decision-making, and communicate complex findings in a clear, practical way. The role will partner with technical and business teams to strengthen policy management, vendor oversight, and broader governance activities while helping the organization maintain a strong security posture.
Responsibilities:
• Coordinate governance, risk, and compliance activities that support enterprise cybersecurity objectives and operational priorities.
• Maintain, review, and improve security policies, standards, and related documentation to keep guidance current and actionable.
• Perform third-party and vendor risk evaluations, document findings, and help track remediation efforts through completion.
• Translate technical security issues into concise business language for leadership, cross-functional stakeholders, and external partners.
• Partner with IT, legal, procurement, and business teams to support risk assessments, control reviews, and governance initiatives.
• Monitor compliance-related tasks, produce status reporting, and keep risk registers, dashboards, and supporting records organized and accurate.
• Contribute to assessments involving access controls, data protection practices, SaaS-related risks, and other core cybersecurity domains.
• Use Microsoft 365 tools to manage reporting, coordinate project activity, and track deliverables across multiple concurrent workstreams.• 3+ years of experience in cybersecurity governance, risk, compliance, third-party risk management, or IT risk.
• Working knowledge of cybersecurity principles, including identity and access management, data security, and cloud or SaaS risk considerations.
• Ability to communicate risk, controls, and assessment results clearly to both technical and non-technical audiences.
• Strong project coordination and documentation skills with a high level of organization and attention to detail.
• Familiarity with common security and control frameworks used to support governance and compliance programs.
• Proficiency with Microsoft 365 applications for reporting, tracking, and collaboration.
• Ability to manage multiple priorities effectively while working with internal stakeholders and external vendors.
• Exposure to cybersecurity infrastructure concepts such as firewalls, configuration management, or related security technologies is a plus.