HiringCafe
Join our community

28 grc analyst jobs at 23 companies in Frederick, MD

8h
Save
Mark Applied
Hide
Security Governance Risk & Compliance (GRC) Analyst
Washington, District of Columbia, United States
$130k-$170k/yr RemoteFull Time
Virtru
Virtru: Provides data-centric encryption and privacy control software for organizations.
5+ YOE5+ years in information security/GRC or IT audit, deep knowledge of CMMC/NIST/FedRAMP/SOC2/PCI, cloud and GRC tool experience, strong communication and risk assessment skills.
Kubernetes, GCP, AWS, Terraform, GitHub, Okta, Hyperproof, Vanta, Drata, Datadog, Splunk
Job PostingView all
3w
Save
Mark Applied
Hide
Enterprise Cybersecurity GRC Governance Analyst
McLean, Virginia, United States
$99k-$225k/yr HybridFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
8+ YOE8+ years in ISSO/SCA/ISSE/ISSM roles, experience configuring and automating GRC platforms (ServiceNow, Archer, Xacta, eMASS), knowledge of NIST frameworks and federal security standards, HS diploma/GED, U.S. citizenship required.
ServiceNow, Archer, Xacta, eMASS, RSA Archer, CSAM, Telos Xacta
Job PostingView all
3w
Save
Mark Applied
Hide
Enterprise Cybersecurity GRC Governance Analyst
McLean or United States
$99k-$225k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
8+ YOE8+ years in ISSO/SCA/ISSE/ISSM roles; experience configuring and automating GRC platforms (ServiceNow, Archer, Xacta, eMASS); strong process/change management, policy-to-implementation translation, and knowledge of NIST RMF/FISMA/FedRAMP; U.S. citizenship required.
ServiceNow, Archer, RSA Archer, Xacta, Telos Xacta, eMASS, CSAM, API
Job PostingView all
1mo
Save
Mark Applied
Hide
Business Analyst
McLean, Virginia, United States
$85k/yr OnsiteContract
The Cadmus Group
The Cadmus Group: Provides strategic and technical advisory services for complex infrastructure.
5+ YOEBA/BS and 5+ years business/product analyst experience (risk, compliance, or regulatory preferred); ERM knowledge; ServiceNow IRM or GRC experience; Agile delivery experience; strong analytical, communication, and UAT skills.
ServiceNow IRM, Agile
Job PostingView all
2mo
Save
Mark Applied
Hide
Cybersecurity Compliance Analyst
Columbia or Huntsville
RemoteFull Time
DigiFlight
DigiFlight: Provides cybersecurity, aerospace, and systems engineering for government agencies.
3+ YOE3–5 years in cybersecurity governance, risk, and compliance (GRC) with frameworks such as CMMC/NIST ISO etc.
Microsoft Word, Microsoft Excel, Microsoft PowerPoint, SharePoint
Job PostingView all
1mo
Save
Mark Applied
Hide
Sr. ServiceNow Business Analyst - HRSD
McLean, Virginia, United States
OnsiteFull Time
Guidehouse
Guidehouse: Provides management and technology consulting services to diverse organizations.
5+ YOEAbility to obtain Public Trust; 5+ years as a Business Analyst with 3+ years on ServiceNow; CSA certification; bachelor's degree in CS/IT/Business; strong requirements, SDLC/Agile experience, stakeholder facilitation, solution design, training, and mentoring.
ServiceNow, ITSM, SPM, GRC, App Engine, Scoped Applications, SDLC, Scrum, SAFe
Job PostingView all
4w
Save
Mark Applied
Hide
Compliance Analyst
Arlington, Virginia, United States
OnsiteContract
Argo Cyber Systems
Argo Cyber Systems: Provides managed cybersecurity and incident response services to organizations.
2+ YOEU.S. citizenship and active TS/SCI (DHS EOD suitability) required. 2+ years compliance or cybersecurity experience (Bachelor's preferred), knowledge of NIST/FISMA/FedRAMP/CMMC, strong writing and reporting skills.
NIST SP 800-53, NIST 800-171, CMMC, FISMA, FedRAMP, Splunk, Databricks Intelligence Platform, Python, JavaScript, Linux, Windows, SAFe, GRC
Job PostingView all
3w
Save
Mark Applied
Hide
Senior Analyst, IT Internal Controls & SOX Compliance
San Francisco or Salt Lake City or Phoenix or Los Angeles or Chicago or Boston or Austin or New York City or Miami or Tampa or Atlanta or Columbus or Boise or San Diego or Minneapolis or Houston or Raleigh or Nashville or Kansas City or Charlotte or Portland or Philadelphia or Dallas or Washington D.C. or Seattle
$113k-$148k/yr RemoteFull Time
Circle
CircleNYSE: CRCL: Digital currency issuer and blockchain financial infrastructure provider.
4+ YOE4+ years Big 4 IT audit/controls experience, Bachelor's in related field, CPA/CISA/CIA/CISSP required; strong SOX/ITGC knowledge, cloud/SaaS/SDLC/IAM experience, ERP/GRC familiarity, and stakeholder communication skills.
Slack, Apple MacOS, Google Workspace, ERP, GRC, AI
Job PostingView all
14h
Save
Mark Applied
Hide
Cleared Cyber Analyst
Rome or Chantilly or Charlottesville
$141k-$263k/yr OnsiteFull Time
General Atomics Aeronautical Systems
General Atomics Aeronautical Systems: Designs and manufactures unmanned aircraft and radar systems.
5+ YOEActive Top Secret/SCI clearance, US citizenship, bachelor\u0002s or equivalent, ~5+ years security experience, knowledge of CMMC/DFARS/NIST, RMF/IC directives, security assessments, and strong analytical and communication skills.
SIEM, GRC, vulnerability scanners
Job PostingView all
13h
Save
Mark Applied
Hide
IT Risk & Compliance Analyst
Washington, District of Columbia, United States
$77k-$95k/yr OnsiteFull Time
NORC at the University of Chicago
NORC at the University of Chicago: Conducts objective social science research and public policy analysis.
2+ YOESupport FedRAMP continuous monitoring, assess security controls, coordinate evidence collection and audits, track remediation; U.S. citizenship required; 2+ years GRC/security experience preferred.
CSAM, ServiceNow GRC, Archer
Job PostingView all
6d
Save
Mark Applied
Hide
Senior Information Security Analyst
Fairfax, Virginia, United States
$105k-$115k/yr HybridFull Time
Data Systems Analysts
Data Systems Analysts: Provides IT and cybersecurity solutions for government agencies.
8+ YOEBachelor's in IT or related +8 years IA experience (CISSP may substitute 2yrs), 3+ years leadership, Public Trust eligibility, NIST RMF and 800-53 expertise, GRC tool experience, strong analysis and communication skills.
Microsoft Copilot, Telos Xacta, CSAM, RSA Archer, eMASS
Job PostingView all
2w
Save
Mark Applied
Hide
Senior Security Analyst, Customer Assurance
New York City or Seattle or Raleigh or San Francisco or Washington or London or Amsterdam
$134k-$214k/yr HybridFull Time
Plaid
Plaid: Provides financial data connectivity and payment infrastructure via APIs.
6+ YOE6+ years in security assurance/GRC with ownership of customer-facing security workflows; experience reviewing security contract provisions; familiarity with SOC 2, ISO 27001, NIST frameworks, PCI, GLBA, GDPR/CCPA; program design, metrics ownership, and AI-assisted workflow experience.
SOC 2, ISO 27001, NIST CSF, PCI DSS, GLBA, GDPR, CCPA, NIST 800-53
Job PostingView all
2mo
Save
Mark Applied
Hide
Enterprise Risk Analyst
Denver or Long Beach or Washington DC
$115k-$165k/yr OnsiteFull Time
True Anomaly
True Anomaly: Develops autonomous spacecraft and software for space security missions.
5+ YOEEnterprise risk and third-party risk focus; knowledge of NIST RMF, CMMC; experience with risk quantification methods like FAIR/OCTAVE; collaboration across engineering, security, legal, and operations.
NIST RMF, CMMC, OCTAVE, FAIR, Jira, Confluence, MS Project, GRC platforms
Job PostingView all
3w
Save
Mark Applied
Hide
Senior Compliance and Risk Analyst
United States or San Francisco or San Jose or New York City or Chicago or Austin or Denver or Boston or Washington or Philadelphia or Portland or Seattle or Miami or California or Alaska or Delaware or Hawaii or Idaho or Iowa or Montana or Nebraska or North Dakota or Rhode Island or South Dakota or West Virginia
$165k-$233k/yr RemoteFull Time
Calendly
Calendly: Scheduling automation platform for managing meetings and appointments.
5+ YOE5+ years in compliance/GRC in a technology/SaaS environment; SOC 2 and ISO 27001 experience; knowledge of NIST, GDPR, HIPAA; experience with compliance automation platforms and UARs; strong project management and communication.
SOC 2, ISO 27001, NIST, GDPR, HIPAA, Drata, Vanta, Tugboat Logic, PCI DSS, FedRAMP
Job PostingView all
3d
Save
Mark Applied
Hide
Vendor Management and Risk Analyst - Remote
Eden Prairie or Minneapolis or Washington or United States
$73k-$130k/yr RemoteFull Time
UnitedHealth Group
UnitedHealth GroupNYSE: UNH: Provides health insurance and technology-enabled health care services.
3+ YOE3+ years vendor management in financial services, 2+ years audit/GRC and regulatory experience (FDIC/CFPB/SOC/HITRUST), knowledge of PII/PCI/PHI security, strong communication and stakeholder collaboration skills.
Job PostingView all
6d
Save
Mark Applied
Hide
Mid-Level RMF Controls / ConMon Analyst
Washington or Maryland
$75k-$90k/yr RemoteContract
K2United
K2United: Provides cybersecurity advisory and online workforce safety training.
4+ YOE4+ years RMF/continuous monitoring experience, POA&M and control assessment expertise, GRC platform experience, bachelor’s degree or equivalent, ability to meet federal background investigation.
JCAM, CSAM, eMASS, Xacta, Power BI, Splunk
Job PostingView all
4d
Save
Mark Applied
Hide
Governance, Risk and Compliance Analyst
Reston or Somerville
$80k-$125k/yr HybridFull Time
Babel Street
Babel Street: AI-powered identity intelligence and risk operations software solutions.
3+ YOEBachelor's degree or equivalent, 3+ years GRC/InfoSec experience, knowledge of NIST CSF, CMMC, Cyber Essentials Plus, SOC 2, ISO/IEC 27001, audit support and risk assessment skills.
NIST Cybersecurity Framework (NIST CSF), CMMC, Cyber Essentials Plus, ISO/IEC 27001, SOC 2
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Risk Analyst, AWS Sustainability Controllership
Arlington or Seattle
$83k-$146k/yr OnsiteFull Time
Amazon
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
4+ YOEMinimum 4+ years in compliance, governance, audit, risk or equivalent; bachelor's degree or equivalent; experience with regulatory filings, handling confidential information, stakeholder collaboration; preferred SQL and Excel, auditing credential, and sustainability reporting framework familiarity.
SQL, Microsoft Excel, GRC, GRI, TCFD, CSRD, GHG Protocol
Job PostingView all
2mo
Save
Mark Applied
Hide
NERC Operations Sr Analyst, Central
Indianapolis or Dayton or Arlington or Salt Lake City or Louisville
$83k-$99k/yr OnsiteFull Time
AES
AESNYSE: AES: Provides global power generation and sustainable energy solutions.
3+ YOEBachelor’s in engineering or related field; 3–7+ years in inverter-based resources; NERC standards knowledge; analytical and organizational skills; strong communication and cross-functional collaboration; preferred certifications.
SCADA, OATI, SAP, GADS, OATI Portal, NERC Compliance tools, GRC tools
Job PostingView all
2mo
Save
Mark Applied
Hide
NERC Operations Sr Analyst, East
Indianapolis or Dayton or Arlington or Salt Lake City or Louisville
$83k-$99k/yr OnsiteFull Time
AES
AESNYSE: AES: Provides electricity and renewable energy solutions globally.
3+ YOEBachelor’s degree in engineering; 3–7+ years in inverter-based resources or renewable energy; NERC compliance experience; strong analytical, communication, and cross-functional skills.
SCADA, OATI, SAP, MS Office, GRC
Job PostingView all

Explore Jobs

Expand Your Job Search