Compliance & GRC Specialist (Part-Time, Remote, US/Canada)

Mostro Cybersecurity helps mortgage brokers, RIAs, and financial advisors achieve elite security compliance. We're looking for a part-time Compliance & GRC Specialist (15–20 hrs/week) to own our client compliance programs. MUST HAVES: US or Canada-based 3+ years in compliance, GRC, or security operations Experience with at least 2 of: FTC Safeguards Rule, SOC 2, NIST CSF Hands-on experience with GRC platforms (ControlMap, Vanta, Drata, or similar) Experience running and interpreting penetration tests Strong English (policy reading/writing is core to this role) WHAT YOU'LL DO: Manage compliance workflows for 3–4 client accounts inside ControlMap Run Threatmate pen tests and create client remediation roadmaps Build FTC Safeguards, SOC 2, and NIST CSF compliance programs Conduct gap assessments, evidence collection, and policy reviews Prepare clients for audits and regulatory scrutiny RATE: $40–$60/hour depending on experience TO APPLY: Tell us about your experience with FTC, SOC 2, or NIST and your experience with GRC platforms. Include your rate and availability.