Sr GRC Analyst - ISO27001 Certification Lead (12-month contract)

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Sr GRC Analyst - ISO27001 Certification Lead (12-month contract) based in the United States. The Sr GRC Analyst will lead a major information security initiative, taking an established global technology organization through its first ISO/IEC 27001:2022 certification. This is a hands-on, fixed-term engagement focused on building and implementing a robust Information Security Management System (ISMS), from initial gap assessment through successful Stage 2 certification. Working closely with senior leadership and cross-functional teams, you will coordinate risk assessments, strengthen security controls, and establish reliable audit evidence. You will also leverage existing SOC 2 and PCI DSS frameworks to streamline implementation and avoid unnecessary duplication. Beyond achieving certification, you will develop internal capabilities and ensure a smooth transition to a sustainable, independently managed ISMS.