Cybersecurity GRC Framework Evaluation
Summary
Freelancer Client is hiring: Cybersecurity GRC Framework Evaluation.
Location: Remote
I need a seasoned Cyber Security GRC professional to perform a deep-dive evaluation of our existing governance, risk and compliance framework. The goal is to measure how well our current policies, controls and day-to-day practices align with GDPR, ISO 27001 and NIST requirements, then highlight every gap that could expose us to regulatory, operational or reputational risk.
What you'll do:
• Review all documented policies, procedures, control matrices and evidence repositories.
• Provide a clear, prioritized remediation roadmap and an executive-level summary that can be shared with leadership and auditors.
Skills: Technical Writing, Report Writing, Article Writing, Research Writing, Risk Management, Risk Assessment, Data Protection
Budget: $1250–$2500 USD
Source: Freelancer Client via Remote / Online. Apply on the source website.
Original
I need a seasoned Cyber Security GRC professional to perform a deep-dive evaluation of our existing governance, risk and compliance framework. The goal is to measure how well our current policies, controls and day-to-day practices align with GDPR, ISO 27001 and NIST requirements, then highlight every gap that could expose us to regulatory, operational or reputational risk.
Scope
• Review all documented policies, procedures, control matrices and evidence repositories.
• Interview key stakeholders to validate that written processes match real-world execution.
• Map every applicable control to GDPR, ISO 27001 and NIST, flagging overlaps and conflicts.
• Provide a clear, prioritized remediation roadmap and an executive-level summary that can be shared with leadership and auditors.
Acceptance criteria
1. A concise executive summary (max. 5 pages) that highlights critical findings.
2. A detailed gap analysis spreadsheet or report, clearly referencing GDPR articles, ISO 27001 clauses and NIST controls.
3. A 90-day and 180-day remediation plan with effort estimates and ownership suggestions.
4. Recommendations must be actionable, ranked by risk and effort, and traceable back to your assessment evidence.
Please attach a detailed project proposal outlining your methodology, the artefacts you will deliver, key milestones and any tooling you plan to use (e.g., risk registers, GRC platforms, compliance checklists). Past success stories are welcome, but a well-structured proposal will carry the most weight.
Location & Details
Apply on source →About this listing
This remote opportunity was imported from Freelancer and is shown here for discovery. To apply, follow the link to the original posting.