GRC Analyst

We are seeking an experienced Cybersecurity Internal Audit Consultant (1099 Contractor) to perform independent internal audits of information security, privacy, and AI management systems. The consultant will be responsible for assessing organizational compliance against multiple management system standards, identifying gaps, evaluating control effectiveness, and providing actionable recommendations to support certification readiness and continual improvement.

This role is ideal for an experienced auditor who has performed internal audits for organizations pursuing or maintaining certifications such as ISO 27001, ISO 27701, ISO 42001, and related cybersecurity and compliance frameworks.

Engagement Type

Independent Contractor (1099)
Remote with occasional virtual meetings
Project-based with opportunity for recurring engagements
Flexible scheduling based on audit plans and certification timelines

Key Responsibilities

Plan and execute internal audits against:
- ISO/IEC 27001 Information Security Management Systems (ISMS)
- ISO/IEC 27701 Privacy Information Management Systems (PIMS)
- ISO/IEC 42001 Artificial Intelligence Management Systems (AIMS)
- Additional standards and frameworks as applicable
Review policies, procedures, standards, risk assessments, and supporting documentation.
Assess operational effectiveness of security, privacy, and AI governance controls.
Conduct interviews with stakeholders, control owners, and process owners.
Validate evidence supporting compliance requirements.
Identify nonconformities, observations, and opportunities for improvement.
Develop detailed audit reports, findings, and corrective action recommendations.
Present audit results to leadership and management teams.
Assist with remediation validation and follow-up assessments.
Provide guidance on audit preparedness and continual improvement activities.

Required Qualifications

ISO 27001 Lead Auditor certification.
ISO 27701 auditing experience.
ISO 42001 auditing experience.
Experience conducting cybersecurity, privacy, risk, or compliance audits.
Demonstrated experience auditing against ISO management system standards.
Strong understanding of:
- Information Security Governance
- Risk Management
- Access Control
- Incident Response
- Vendor Risk Management
- Privacy Programs
- AI Governance and Risk Management
Experience interviewing stakeholders and evaluating control effectiveness.
Excellent report writing, communication, and presentation skills.
Ability to work independently and manage multiple audit engagements.

Preferred Qualifications

Certified Information Systems Auditor (CISA).
Certified Information Security Manager (CISM).
Certified Information Systems Security Professional (CISSP).
Certified Internal Auditor (CIA).
Experience supporting accredited certification audits.
Knowledge of NIST CSF, NIST AI RMF, SOC 2, HITRUST, PCI DSS, or similar frameworks.

Compensation

Hourly or fixed-fee engagement depending on scope and experience.
Competitive market rates commensurate with certifications and relevant audit experience.

Originally posted on Himalayas

Job Description

1099 Contractor Opportunity

Cybersecurity Internal Auditor (ISO 27001, ISO 27701, ISO 42001)

Position Overview

Engagement Type

Independent Contractor (1099)
Remote with occasional virtual meetings
Project-based with opportunity for recurring engagements
Flexible scheduling based on audit plans and certification timelines

Key Responsibilities

Plan and execute internal audits against:
- ISO/IEC 27001 Information Security Management Systems (ISMS)
- ISO/IEC 27701 Privacy Information Management Systems (PIMS)
- ISO/IEC 42001 Artificial Intelligence Management Systems (AIMS)
- Additional standards and frameworks as applicable
Review policies, procedures, standards, risk assessments, and supporting documentation.
Assess operational effectiveness of security, privacy, and AI governance controls.
Conduct interviews with stakeholders, control owners, and process owners.
Validate evidence supporting compliance requirements.
Identify nonconformities, observations, and opportunities for improvement.
Develop detailed audit reports, findings, and corrective action recommendations.
Present audit results to leadership and management teams.
Assist with remediation validation and follow-up assessments.
Provide guidance on audit preparedness and continual improvement activities.

Required Qualifications

ISO 27001 Lead Auditor certification.
ISO 27701 auditing experience.
ISO 42001 auditing experience.
Experience conducting cybersecurity, privacy, risk, or compliance audits.
Demonstrated experience auditing against ISO management system standards.
Strong understanding of:
- Information Security Governance
- Risk Management
- Access Control
- Incident Response
- Vendor Risk Management
- Privacy Programs
- AI Governance and Risk Management
Experience interviewing stakeholders and evaluating control effectiveness.
Excellent report writing, communication, and presentation skills.
Ability to work independently and manage multiple audit engagements.

Preferred Qualifications

Certified Information Systems Auditor (CISA).
Certified Information Security Manager (CISM).
Certified Information Systems Security Professional (CISSP).
Certified Internal Auditor (CIA).
Experience supporting accredited certification audits.
Knowledge of NIST CSF, NIST AI RMF, SOC 2, HITRUST, PCI DSS, or similar frameworks.

Compensation

Hourly or fixed-fee engagement depending on scope and experience.
Competitive market rates commensurate with certifications and relevant audit experience.

Originally posted on Himalayas

Job Description

1099 Contractor Opportunity

Cybersecurity Internal Auditor (ISO 27001, ISO 27701, ISO 42001)

Position Overview

Engagement Type

Independent Contractor (1099)
Remote with occasional virtual meetings
Project-based with opportunity for recurring engagements
Flexible scheduling based on audit plans and certification timelines

Key Responsibilities

Plan and execute internal audits against:
- ISO/IEC 27001 Information Security Management Systems (ISMS)
- ISO/IEC 27701 Privacy Information Management Systems (PIMS)
- ISO/IEC 42001 Artificial Intelligence Management Systems (AIMS)
- Additional standards and frameworks as applicable
Review policies, procedures, standards, risk assessments, and supporting documentation.
Assess operational effectiveness of security, privacy, and AI governance controls.
Conduct interviews with stakeholders, control owners, and process owners.
Validate evidence supporting compliance requirements.
Identify nonconformities, observations, and opportunities for improvement.
Develop detailed audit reports, findings, and corrective action recommendations.
Present audit results to leadership and management teams.
Assist with remediation validation and follow-up assessments.
Provide guidance on audit preparedness and continual improvement activities.

Required Qualifications

ISO 27001 Lead Auditor certification.
ISO 27701 auditing experience.
ISO 42001 auditing experience.
Experience conducting cybersecurity, privacy, risk, or compliance audits.
Demonstrated experience auditing against ISO management system standards.
Strong understanding of:
- Information Security Governance
- Risk Management
- Access Control
- Incident Response
- Vendor Risk Management
- Privacy Programs
- AI Governance and Risk Management
Experience interviewing stakeholders and evaluating control effectiveness.
Excellent report writing, communication, and presentation skills.
Ability to work independently and manage multiple audit engagements.

Preferred Qualifications

Certified Information Systems Auditor (CISA).
Certified Information Security Manager (CISM).
Certified Information Systems Security Professional (CISSP).
Certified Internal Auditor (CIA).
Experience supporting accredited certification audits.
Knowledge of NIST CSF, NIST AI RMF, SOC 2, HITRUST, PCI DSS, or similar frameworks.

Compensation

Hourly or fixed-fee engagement depending on scope and experience.
Competitive market rates commensurate with certifications and relevant audit experience.

Originally posted on Himalayas

Job Description

1099 Contractor Opportunity

Cybersecurity Internal Auditor (ISO 27001, ISO 27701, ISO 42001)

Position Overview

Engagement Type

Independent Contractor (1099)
Remote with occasional virtual meetings
Project-based with opportunity for recurring engagements
Flexible scheduling based on audit plans and certification timelines

Key Responsibilities

Plan and execute internal audits against:
- ISO/IEC 27001 Information Security Management Systems (ISMS)
- ISO/IEC 27701 Privacy Information Management Systems (PIMS)
- ISO/IEC 42001 Artificial Intelligence Management Systems (AIMS)
- Additional standards and frameworks as applicable
Review policies, procedures, standards, risk assessments, and supporting documentation.
Assess operational effectiveness of security, privacy, and AI governance controls.
Conduct interviews with stakeholders, control owners, and process owners.
Validate evidence supporting compliance requirements.
Identify nonconformities, observations, and opportunities for improvement.
Develop detailed audit reports, findings, and corrective action recommendations.
Present audit results to leadership and management teams.
Assist with remediation validation and follow-up assessments.
Provide guidance on audit preparedness and continual improvement activities.

Required Qualifications

ISO 27001 Lead Auditor certification.
ISO 27701 auditing experience.
ISO 42001 auditing experience.
Experience conducting cybersecurity, privacy, risk, or compliance audits.
Demonstrated experience auditing against ISO management system standards.
Strong understanding of:
- Information Security Governance
- Risk Management
- Access Control
- Incident Response
- Vendor Risk Management
- Privacy Programs
- AI Governance and Risk Management
Experience interviewing stakeholders and evaluating control effectiveness.
Excellent report writing, communication, and presentation skills.
Ability to work independently and manage multiple audit engagements.

Preferred Qualifications

Certified Information Systems Auditor (CISA).
Certified Information Security Manager (CISM).
Certified Information Systems Security Professional (CISSP).
Certified Internal Auditor (CIA).
Experience supporting accredited certification audits.
Knowledge of NIST CSF, NIST AI RMF, SOC 2, HITRUST, PCI DSS, or similar frameworks.

Compensation

Hourly or fixed-fee engagement depending on scope and experience.
Competitive market rates commensurate with certifications and relevant audit experience.

Originally posted on Himalayas