GRC Consultant
WHO YOU ARE
As a Governance, Risk and Compliance (GRC) Consultant, you will work closely with our clients to assess cybersecurity risks, evaluate compliance requirements, and provide practical recommendations that align with their business goals. You will support the design and implementation of tailored cybersecurity programs that strengthen operational resilience, regulatory readiness, and client trust.
This position is ideal for a professional with solid knowledge of GRC frameworks, strong analytical capabilities, and a passion for helping clients improve their cybersecurity posture. You will independently manage assigned deliverables and client engagements while collaborating with senior consultants and the GRC Manager on more complex initiatives.
RESPONSIBILITIES
- GRC Advisory & Implementation: Support and deliver the planning, design, implementation, and transition of governance, risk, and compliance programs, ensuring alignment with client business objectives and risk tolerance.
- Security Control Assessment: Assess technical and procedural security controls to evaluate their maturity, effectiveness, and compliance against industry standards and frameworks such as ISO/IEC 27001, NIST SP 800-53, PCI DSS, COBIT, HIPAA, and NERC CIP.
- Privacy Compliance: Analyze privacy practices and controls for compliance with regulations such as GDPR, FIPPA, PIPEDA, and PIPA. Identify gaps and recommend improvements to strengthen privacy assurance and reduce regulatory risk.
- Security Program Development: Develop and maintain client-specific security policies, procedures, governance structures, and processes. Support the implementation of scalable and sustainable information security programs to meet client compliance objectives.
- Risk-Based Recommendations: Identify security risks and provide practical, risk-based recommendations to help clients strengthen their security posture across operations, systems, and processes while considering business priorities and available resources.
- Client Engagement & Communication: Build positive relationships with client stakeholders. Prepare and deliver assessments, reports, presentations, and recommendations tailored to technical and business audiences. Manage assigned client deliverables and communicate progress, risks, and issues effectively.
- Internal Process Optimization: Contribute to the development and refinement of Mirai’s GRC service delivery methodologies and best practices.
- Representation & Thought Leadership: Represent Mirai with integrity, professionalism, and subject-matter expertise in both client-facing engagements and the broader industry community.
QUALIFICATIONS & REQUIREMENTS
- 3+ years of experience in cybersecurity governance, risk, and compliance roles, preferably in a consulting or client-facing capacity.
- Proven expertise with information security standards and frameworks such as ISO/IEC 27001, CMMC, and SOC 2.
- Not required but would be an asset is experience or certification in PCI DSS, and/or FedRAMP.
- Familiarity with industry-specific compliance challenges across various sectors.
- Strong understanding of privacy laws and regulations including GDPR, PIPEDA, and FIPPA.
- Demonstrated experience developing security policies, risk management strategies, and governance frameworks.
- Ability to perform control assessments and gap analyses with actionable recommendations.
- Excellent verbal and written communication skills, including experience working with senior stakeholders.
- Strong client presence, professionalism, and stakeholder engagement skills.
- Comfortable working independently and remotely, while managing multiple client projects.
- A positive, can-do, customer-focused attitude.
- Proficient with the M365 suite of products.
- Demonstrated ability to communicate effectively with team members from various disciplines, cultures, and backgrounds.
- Bonus: Fluency in additional languages enhances your ability to effectively support our international clientele.
OUR VALUES AND VISION
The DNA of Mirai Security was forged out of Vancouver’s cyber security community by members who wanted to do security better. Mirai’s founders realized the potential of their community and resolved to develop a collective with a great culture that would naturally attract like-minded cyber security professionals to work as one. Our culture is defined by our purpose, core values, and people.
We not only seek out employees but people passionate about contributing to our company culture, our growth within the industry, and the greater cyber security community. You will be a great fit for us if you share our core values of Integrity, Care, Diversity, Growth-Mindset, and Innovation. We are looking for like-minded experts to help make our clients secure!
GROW PERSONALLY AND PROFESSIONALLY
We're a remote-first company and are proud to offer competitive salaries, including merit increases as well as performance bonuses. We also offer a comprehensive benefits package (including but not limited to health, dental, and vision), continuous learning opportunities, and community networking.
At Mirai Security, we want you to be confident bringing your whole self to work—we’re proud to be an inclusive company with a diverse team and values grounded in ethics and equality.
While we thank all applicants for their interest, only shortlisted applicants will be contacted.
