GRC Consultant

About the role

Scytale is looking for a driven GRC Consultant to guide customers through complex compliance processes, support security audits, and help shape the future of automated governance, risk, and compliance solutions.

Key responsibilities

• Prepare SaaS companies for audits such as SOC 2 and ISO 27001, managing assessment, preparation, and audit execution.
• Assist customers with vendor security questionnaires, policy creation, procedures, and risk assessments using Scytale’s platform.
• Advise clients on best practices and evolving security regulations.
• Maintain long‑term client relationships by ensuring ongoing compliance needs are met.
• Coordinate activities across multiple internal teams to ensure seamless delivery.
• Drive product improvements by feeding market feedback and customer insights back to the development team.

Required profile

• Minimum 2 years of experience in technology risk, compliance, GRC, or related roles.
• Proven experience managing compliance projects and audits (e.g., SOC 2, ISO 27001).
• Background in responding to security questionnaires.
• Strong verbal and written communication skills.
• Self‑starter attitude with a solution‑focused mindset.

Required skills

• SOC 2 compliance framework
• ISO 27001 compliance framework
• Security questionnaire handling
• Risk assessment development
• Compliance project management tools

What we offer

• Innovative work on a cutting‑edge AI‑driven compliance platform.
• Learning and growth opportunities through courses, conferences, and mentorship.
• Collaborative culture with supportive colleagues.
• Relaxation spaces, team events, happy hours, and holiday celebrations.
• Family‑first policies that prioritize personal and family needs.