GRC Engineer

Immediate need for a talented GRC Engineer. This is a 06+months contract opportunity with long-term potential and is located in Miami ,FL(Hybrid). Please review the job description below and contact me ASAP if you are interested.

Job ID:26-33505

Pay Range: $50 - $60/hour.  Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).

Key Responsibilities:

• Operate the ISO 27001:2022 ISMS, including internal audits and management reviews.
• Run SOC 2 scoping, control mapping, and auditor walkthroughs.
• Maintain a control framework mapped across ISO 27001, SOC 2, SOX ITGC, NIST CSF 2.0, and NIST SP 800-53 Rev. 5.
• Administer Drata, including control library management and integrations with various systems.
• Stand up the cyber risk program, defining methodologies and building the initial risk register.
• Manage the vendor lifecycle in Drata, including assessments and ongoing monitoring.
• Draft and manage the policy lifecycle, ensuring compliance and risk metrics are reported to leadership.

Key Requirements and Technology Experience:

• Certifications: ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM, CISSP, or CCSP.
• Experience in energy, critical infrastructure, or data center environments.
• Familiarity with OT/ICS frameworks (IEC 62443, NIST SP 800-82) or NERC CIP.
• Exposure to SEC cybersecurity disclosure rules and board-level reporting.
• 6+ years in security GRC, compliance engineering, or IT audit, including 2 years of hands-on technical work (automation, integrations, scripting).
• Experience operating ISO 27001:2022 through a certification or surveillance audit, and SOC 2 audit experience with Type II evidence.
• Practical knowledge of SOX ITGCs and evidence expectations at a publicly traded company.
• Hands-on administration of Drata or a comparable platform (Vanta, Secureframe, etc.).
• Scripting experience in Python, PowerShell, or similar, with comfort in REST APIs for evidence collection.
• Strong written communication skills for diverse audiences, including engineers and executives.
• Certifications: ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM, CISSP, or CCSP.
• Experience in energy, critical infrastructure, or data center environments.
• Familiarity with OT/ICS frameworks (IEC 62443, NIST SP 800-82) or NERC CIP.
• Exposure to SEC cybersecurity disclosure rules and board-level reporting.

Our client is a leading Financial Industry, and we are currently interviewing to fill this and other similar contract positions. If you are interested in this position, please apply online for immediate consideration.

Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, colour, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.  

By applying to our jobs you agree to receive calls, AI-generated calls, text messages, or emails from Pyramid Consulting, Inc. and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here.

#san