GRC Consultant

RedFortress Technologies · India

Take clients from gap assessment to audit across SOC 2, ISO 27001 and privacy frameworks.

Responsibilities

• Run gap assessments and build remediation roadmaps
• Author policies and procedures grounded in how the client actually operates
• Design evidence collection workflows with engineering teams
• Facilitate internal audits and management reviews
• Act as the client's point of contact with external assessors

Requirements

• — Experience delivering at least one SOC 2 or ISO 27001 certification
• — Working knowledge of GDPR and HIPAA obligations
• — Ability to hold a technical conversation with engineers, not just auditors
• — Excellent documentation and stakeholder management skills