GRC Specialist

ELDR Advisory's GRC practice delivers governance, risk, and compliance documentation infrastructure for financial services, healthcare, and government clients. This role produces the documentation artifacts that make compliance programs defensible under scrutiny.

• —Author and govern GRC documentation — policies, standards, procedures, control narratives — aligned to ISO 27001, NIST 800-53, SOC 2, FedRAMP, and PCI-DSS
• —Build evidence traceability frameworks mapping requirements through controls to audit artifacts
• —Support clients through regulatory examinations, certification audits, and ATO processes
• —Develop and maintain ISMS policy suites and Statements of Applicability
• —Provide advisory support on multi-framework alignment and control rationalization

• —5–10 years of GRC documentation, compliance program, or audit support experience
• —Working knowledge of ISO 27001, NIST 800-53, SOC 2, and FedRAMP baselines
• —Experience producing control narratives and audit evidence packages
• —Ability to work across engineering, legal, and compliance stakeholders

• —CISA, CISSP, CISM, or ISO 27001 Lead Auditor/Implementor certification
• —Federal government or financial services background
• —Experience with GRC platforms (ServiceNow, Archer, OneTrust)

• —Client-facing advisory role across enterprise and federal engagements
• —Competitive compensation with performance structure
• —DC hybrid base with remote flexibility