Grc Consultant

Title: Cybersecurity GRC Engineer

Location: Reston, VA (Predominantly Remote)

Duration: 6 Months Contract

Job Description: Terms of Employment W2 Contract, 6 months Location: Remote (East Coast hours required; preference for DMV area candidates due to on-site interview requirement)

Overview Client is seeking a adaptable Senior Cybersecurity Risk & Governance Engineer to join the Cybersecurity Governance, Risk, and Compliance (GRC) organization supporting a leading healthcare program (FEPOC). In this versatile role, you will act as a core support engine across multiple GRC pillars-evaluating risk for new technology implementations (including AI initiatives), facilitating continuous third-party monitoring, supporting compliance tasks, and authoring clear Standard Operating Procedures (SOPs). This position is ideal for a seasoned GRC professional who thrives in a fast-paced environment and enjoys varied, impactful daily responsibilities.

Key Responsibilities Support the broader GRC team in conducting cybersecurity risk assessments, with a focus on third-party vendor reviews and emerging artificial intelligence (AI) implementations. Draft, review, and refine Standard Operating Procedures (SOPs), governance guidelines, and technical compliance documentation. Assist cybersecurity analysts with issue tracking, governance functions, and continuous monitoring tasks. Collaborate across IT and cybersecurity teams to identify operational gaps and provide immediate risk mitigation support. Maintain accurate tracking and documentation within Microsoft Office applications and internal GRC tracking platforms.

Required Qualifications Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or similar or In lieu of a Bachelor's degree, an additional 4 years of relevant work experience is required in addition to the required work experience. 5+ years of dedicated professional experience in Cybersecurity and Risk Management frameworks. Strong practical knowledge & experience of risk assessment methodologies, IT governance, and regulatory compliance concepts. Demonstrated ability to write operational technical documentation, including SOPs and governance guidelines. Proficiency with the Microsoft Office Suite (Word, Excel, PowerPoint) and virtual environment workflows (VDI). Strong communication skills and the ability to work well within a small, fast-paced team.

Preferred Qualifications Prior exposure to an eGRC tool Active industry certifications such as CRISC, CISSP, CEH, CTIA, or CISA. Professional experience within the Healthcare or health insurance sector. Familiarity with AI technology risk frameworks or third-party continuous monitoring platforms.

Interview Process Initial interview with the hiring manager (video) In-person Panel interview with a team of managers

Sincerely, OpenKyber Team Lead, Talent Acquisition OpenKyber Workforce Inc.

For applications and inquiries,