Architect | GRC/AI Governance (Remote)

Leads governance, risk and compliance consulting engagements for Trace3 clients, working with CISOs and risk leaders from kickoff to executive readout. The architect assesses security programmes against NIST CSF and related frameworks, runs gap assessments for rules such as PCI DSS, HIPAA and CMMC, performs risk assessments and business impact analyses, helps clients set up AI governance, and mentors consultants.

The company wants eight or more years in information security, IT risk or IT audit, five delivering GRC consulting, with experience leading NIST CSF assessments. CISSP, CISA, CISM or CRISC is strongly desired. Remote, with travel when needed.