Governance Consultant – GRC Practice

Job Description:

• Assess and Improve Current-State Governance
• Evaluate decision-making pathways, forums and committees, escalation routes, roles and responsibilities, and how governance artifacts are used in practice.
• Identify gaps, overlaps, and friction points that slow execution or create risk.
• Design Governance Structures, Decision Rights, and Accountability
• Design or refresh fit-for-purpose governance models, including decision rights, accountability frameworks such as RACIs, escalation protocols, and role clarity across teams and leadership levels.
• Build and Operationalize Governance Artifacts and Routines
• Develop and implement the governance documentation and operating mechanisms that make governance real and repeatable, including charters, agendas, decision logs, action tracking, policy and standards structures, lifecycle and exception processes, and lightweight operating guidance.
• Drive Adoption Through Implementation Planning and Enablement
• Translate governance design into roadmaps and workplans, coordinate stakeholders, manage dependencies, and support change enablement through communications, training, and rollout support to drive adoption and sustained usage.
• Establish Metrics and Reporting Cadences
• Define governance KPIs and KRIs and reporting cadences. Stand up repeatable reporting that gives leadership visibility into adoption, decision speed and follow-through, open issues, and risk signals.

Requirements:

• 5+ years of experience in governance, risk, compliance, or a closely related field
• Demonstrated ability to assess, design, and implement governance structures, decision rights, and accountability models in complex organizations
• Strong facilitation skills and experience producing executive-ready deliverables, including slides, memos, and frameworks
• Strong execution discipline: coordinating stakeholders, tracking actions, risks, and dependencies, and driving follow-through
• Experience with governance and control frameworks such as COBIT, ISO 27001, or NIST CSF / 800-53
• 2+ years of consulting or client-facing advisory experience (preferred)
• Relevant professional certification such as CGEIT, CRISC, CISM, or CISA (preferred)
• Familiarity with regulated or risk-sensitive environments including cybersecurity, privacy, data governance, or government contracting (preferred)
• Experience standing up governance programs in high-growth technology or SaaS environments (preferred)

Benefits:

• Competitive salary
• Project-based engagement
• Occasional travel based on client needs