Help us shape the future of security, risk & compliance

We are looking for an experienced GRC professional with 6+ years of experience in security governance, risk management, and compliance. You will lead client engagements across frameworks such as SOC 2, ISO 27001, HIPAA, PCI DSS, and NIST, helping organizations build practical security programs, close control gaps, and prepare for audits.

Join our compliance team to help organizations build and maintain audit-ready security programs. You will perform control assessments, collect and validate evidence, maintain compliance documentation, track remediation activities, and support SOC 2 and ISO 27001 readiness engagements. Strong attention to detail and familiarity with security controls are essential.

We are seeking a cybersecurity risk professional with 3+ years of experience in information security risk assessment. You will identify and assess technical and operational risks, maintain risk registers, perform control effectiveness assessments, and work with engineering and business teams to develop practical risk treatment plans. Experience with NIST CSF, ISO 27005, or similar frameworks is preferred.

Help clients become audit-ready and maintain strong internal controls. You will conduct internal control assessments, perform evidence reviews, identify control deficiencies, prepare audit workpapers, and support external audit engagements. Experience with SOC 2, ISO 27001, HIPAA, or ITGC assessments is highly valued.

Join our privacy and compliance practice to help organizations understand and manage their data protection obligations. You will support privacy assessments, data-flow reviews, policy development, vendor assessments, and privacy risk programs across regulations such as GDPR, DPDP, and applicable industry requirements. Strong understanding of data governance and information security is a plus.

We are looking for a risk professional to help clients establish scalable third-party and vendor risk programs. You will conduct security assessments, review vendor questionnaires and certifications, evaluate contractual security requirements, identify supplier risks, and maintain ongoing vendor risk monitoring. Experience with SIG, CAIQ, SOC 2 reports, and ISO 27001 is preferred.

Lead organizations through the design, implementation, and continuous improvement of Information Security Management Systems. You will support risk assessments, Statement of Applicability development, policy creation, control implementation, internal audits, and ISO 27001 certification readiness. Practical experience building ISMS programs from the ground up is highly valued.

Build the technology layer behind modern GRC programs. You will automate evidence collection, compliance workflows, control monitoring, risk reporting, and audit preparation using APIs, cloud platforms, and compliance automation tools. Experience with platforms such as Vanta, Drata, Secureframe, Scrut, Jira, AWS, or scripting languages such as Python is a strong advantage.