Remote | Cybersecurity & IT GRC Specialist — $70–$110/hour
24-Mag•New York, NY
•Remote
About The Position
We are sharing a specialised part-time consulting opportunity for experienced cybersecurity and IT governance, risk, and compliance professionals with strong expertise in information security, IT risk, governance, controls, compliance, and professional security work-product review. This role focuses on reviewing professional documents, spreadsheets, and presentation materials related to cybersecurity and IT GRC. Selected experts will assess outputs for technical accuracy, risk and control quality, analytical rigour, practical relevance, presentation effectiveness, and overall professional credibility.
Requirements
- 5+ years of relevant professional experience in cybersecurity, IT GRC, information security, IT risk, IT audit, or a closely related field
- Experience as a GRC Analyst, IT Risk Analyst, Cybersecurity Analyst, Information Security Analyst, IT Auditor, or similar professional
- Strong practical understanding of cybersecurity and IT governance, risk, and compliance
- Experience developing or reviewing security assessments, risk analyses, control documentation, audit materials, or related work products
- Ability to evaluate cybersecurity and GRC recommendations for accuracy, risk relevance, and practical feasibility
- Strong analytical judgement and attention to security, governance, risk, and compliance detail
- Highly proficient with Microsoft Office and Google Workspace
- Advanced proficiency with PowerPoint / Google Slides
- Strong spreadsheet and analytical skills
- Native or professional fluency in English
- Excellent written communication and ability to provide precise, structured feedback
Nice To Haves
- Master's degree or higher from a recognised institution is advantageous
Responsibilities
- Evaluate cybersecurity-related work products for accuracy, completeness, and professional quality
- Assess whether security analyses and recommendations reflect sound professional judgement
- Identify factual errors, unsupported assumptions, and gaps in security reasoning
- Review materials involving information security, technology risk, and organisational controls
- Apply professional judgement grounded in real-world cybersecurity experience
- Review governance, risk, and compliance materials related to technology environments
- Assess whether risks, controls, responsibilities, and recommendations are clearly defined
- Evaluate the consistency and practical soundness of GRC approaches
- Identify gaps in governance, accountability, or compliance processes
- Review whether recommendations appropriately address identified technology risks
- Evaluate technology risk assessments and supporting analyses
- Review risk identification, prioritisation, impact, and supporting rationale
- Assess whether conclusions are appropriately supported by available information
- Identify overlooked risks, weak assumptions, or incomplete analyses
- Evaluate proposed risk responses for practical relevance and consistency
- Review materials involving cybersecurity controls, policies, procedures, and compliance requirements
- Assess whether controls appropriately address identified risks
- Identify gaps in control design, documentation, or implementation logic
- Evaluate compliance-related findings and recommendations
- Distinguish substantive security or control issues from minor documentation concerns
- Evaluate IT audit-related documentation, findings, and supporting evidence
- Assess whether conclusions are adequately supported by the underlying information
- Review control observations, identified deficiencies, and remediation recommendations
- Identify inconsistencies or gaps in audit-support materials
- Evaluate whether findings are communicated clearly and professionally
- Review spreadsheets and analyses supporting cybersecurity and GRC decisions
- Assess calculations, assumptions, risk metrics, and supporting information
- Evaluate whether underlying data supports stated findings and recommendations
- Identify analytical inconsistencies or unsupported conclusions
- Review quantitative and qualitative analyses for clarity and decision usefulness
- Evaluate cybersecurity reports, GRC documents, spreadsheets, and slide decks for accuracy and completeness
- Review presentations for logical flow, clarity, and professional quality
- Identify factual, technical, analytical, aesthetic, and formatting issues
- Assess whether charts, tables, and visuals accurately represent underlying information
- Ensure findings and recommendations are clearly connected to supporting evidence
- Assess assigned outputs against domain-specific quality criteria
- Identify cybersecurity, risk, compliance, analytical, factual, and presentation weaknesses
- Distinguish substantive security issues from minor editorial concerns
- Provide clear, structured written feedback explaining identified strengths and weaknesses
- Apply evaluation standards consistently across different cybersecurity and IT GRC work products
Benefits
- Flexible scheduling based on project requirements
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Part-time
Career Level
Senior
