GRC Security Consultant

Job Description

GRC Security Consultant:
On behalf of our Educational client, Procom is searching for a GRC Security Consultant for a contract role. This position is a remote position based in Alberta, Canada.

GRC Security Consultant - Job Description:
We are seeking a cybersecurity contractor to support the team across security risk assessments, vulnerability management, third-party risk management, and security awareness. The contractor will work closely with technology, business, and vendor teams to identify, assess, track, and reduce security risks.

GRC Security Consultant - Responsibilities:
• Conduct security risk assessments for applications, systems, projects, and technology initiatives.
• Perform third-party/vendor security risk assessments, including reviewing security questionnaires, SOC reports, certifications, and other security documentation.
• Identify, assess, document, and track security risks and recommend appropriate remediation or mitigation actions.
• Operate vulnerability management (VM) tools to identify, prioritize, track, and report vulnerabilities.
• Review and validate vulnerability findings and work with technology teams to drive remediation.
• Track security issues, risks, and exceptions through to resolution.
• Plan and execute phishing simulation campaigns to assess employee awareness and identify areas for improvement.
• Develop security awareness materials, including phishing awareness, security tips, training content, and employee communications.
• Analyze phishing campaign results and provide recommendations to improve employee security awareness.
• Prepare clear risk assessment, vulnerability, third-party risk, and awareness reports for stakeholders.
• Support continuous improvement of security risk, vulnerability management, third-party risk, and security awareness processes.
• Provide regular status updates and reporting on key risks, vulnerabilities, third-party assessments, and awareness activities.

GRC Security Consultant - Mandatory Skills:
• Experience in cybersecurity risk management, vulnerability management, and third-party risk.
• Hands-on experience with vulnerability management tools such as Rapid7.
• Experience performing vendor/third-party security assessments.
• Experience planning and executing phishing simulations and security awareness campaigns.
• Strong understanding of common security risks, vulnerabilities, and security frameworks.
• Strong analytical, communication, and documentation skills.
• Ability to work independently and collaborate effectively with technical, business, and vendor teams.

GRC Security Consultant – Nice-to-Have Skills:
• Experience with security frameworks like NIST or ISO.
• Knowledge of cloud security practices.
• Familiarity with data privacy regulations.
• Experience with security incident response.
• Certifications such as CISSP, CISM, or CISA.

GRC Security Consultant – Assignment Length:
6 months with potential extension

GRC Security Consultant - Start Date:
ASAP.

GRC Security Consultant - Assignment Location:
Remote position based in  Alberta, Canada.