160 grc compliance analyst jobs at 144 companies in United States
2mo
Save
Mark Applied
Hide
Compliance Analyst (GRC/RMF Focused)
United States
RemoteFull Time
3+ YOEGRC/RMF-focused analyst with 3-6+ years of federal/regulatory cybersecurity compliance experience.
GRC tools, On Prem, Cloud, AI tools, Microsoft Office (Word, Excel, SharePoint, Teams)
1mo
Save
Mark Applied
Hide
GRC Analyst
United States
$134k-$202k/yr RemoteFull Time
3+ YOE3+ years supporting audit lifecycle in cloud environments; manage ISO/SOC/HIPAA/PCI compliance, collaborate with engineering, strong project management and communication; familiarity with cloud and GRC tools.
Azure, AWS, Drata, Linear, Datadog
1mo
Save
Mark Applied
Hide
GRC Analyst
New York, New York, United States
$200k-$270k/yr OnsiteFull Time
Experienced in operating compliance controls and audits across SOC 2, ISO 27001, NIST 800-53 or FedRAMP; owning policy sets, evidence collection, and audit readiness on GRC platforms.
Vanta
1mo
Save
Mark Applied
Hide
GRC Analyst
Clemmons, North Carolina, United States
OnsiteFull Time
3+ YOEBachelor's degree in Accounting, Information Systems, Cybersecurity or related; 3+ years SOX-focused GRC/audit experience; hands-on Varonis and SailPoint experience; strong ITGC/ICFR and audit evidence knowledge.
Varonis, SailPoint
1mo
Save
Mark Applied
Hide
Senior GRC Analyst
Atlanta or United States
$110k-$120k/yr RemoteFull Time
5+ YOE5+ years GRC/InfoSec/IT audit experience; experience with SOC 2, ISO 27001, PCI-DSS, NIST, GDPR; audit coordination, TPRM, policy management, GRC tooling experience, strong communication and project management.
Vanta, Drata, Archer, OneTrust, ServiceNow GRC
1mo
Save
Mark Applied
Hide
Senior GRC Analyst, HIPAA
United States or San Francisco
$133k-$195k/yr OnsiteFull Time
6+ YOE6+ years in security compliance/GRC with 3+ years implementing HIPAA programs in technology or regulated environments; strong HIPAA Security Rule knowledge, multi-framework experience, technical fluency with cloud/IAM/CI/CD, and stakeholder communication skills.
HITRUST, SOC 2, ISO 27001, NIST 800-53, PCI DSS, GDPR, CCPA, IAM, CI/CD, infrastructure-as-code, GRC tooling
2mo
Save
Mark Applied
Hide
Senior Governance, Risk, Compliance (GRC) Analyst
San Francisco, California, United States
$162k-$202k/yr OnsiteFull Time
5+ YOE5+ years in GRC/compliance/security risk; knowledge of HITRUST/SOC 2/PCI-DSS/HIPAA; experience with GRC platforms; strong communication; ability to build repeatable processes; interest in AI-enabled security workflows; healthcare/healthtech HIPAA understanding a plus
HITRUST, SOC 2, PCI-DSS, HIPAA, GRC platform (e.g., Vanta, Drata, OneTrust)
3w
Save
Mark Applied
Hide
Senior GRC Analyst
New York City, New York, United States
$115k-$145k/yr RemoteFull Time
5+ YOE5+ years GRC experience with audits, risk assessments, and policy/control rollouts; familiarity with SOC 2/ISO 27001/HIPAA/PCI-DSS/NIST; strong consultative communication and judgment.
1mo
Save
Mark Applied
Hide
Senior GRC Analyst
Westerville, Ohio, United States
OnsiteFull Time
5+ YOE5+ years GRC/cybersecurity experience; knowledge of CMMC and NIST 800-171; strong risk management, policy and vendor risk experience; ability to influence stakeholders and support audits and data governance.
CMMC, NIST 800-171
1w
Save
Mark Applied
Hide
GRC Analyst - Hybrid AZ
Phoenix, Arizona, United States
HybridFull Time
3+ YOESupport governance, risk, and compliance for PCI DSS, SOX, privacy and cybersecurity; coordinate audits, collect evidence, track remediation; 3+ years experience and security/compliance certifications preferred.
PCI DSS v4.0.1, NIST, COBIT, ISO 27001, SOX, GDPR, CCPA, GRC platforms, Excel, PowerPoint
1mo
Save
Mark Applied
Hide
IT Governance Risk & Compliance (GRC) Analyst
Ridgeland, Mississippi, United States
RemoteFull Time
1+ YOEBachelor's in related field, minimum 1 year IT GRC/IT audit experience, familiarity with GLBA/FFIEC/SOX/NIST CSF, strong writing and stakeholder coordination, GRC and ITSM tool experience preferred.
AuditBoard, Archer, ServiceNow, Microsoft Office 365, Microsoft Excel, Microsoft SharePoint, Alteryx, Tableau, Power BI, Python
2w
Save
Mark Applied
Hide
Senior Technology Governance, Risk & Compliance (GRC) Analyst
New York City or Atlanta or Los Angeles or Jersey City or Canada or United Kingdom or Ireland or Portugal or Romania or Australia or Puerto Rico
$138k-$173k/yr HybridFull Time
5+ YOE5+ years technology/cybersecurity GRC experience, hands-on control lifecycle, technology risk assessments, policy development, audit and regulatory assessment experience, strong communication skills.
NIST CSF, GLI-GSF, PCI, SOC2, SOX, NIST 800-53, FAIR, AWS, Okta, GitHub, Atlassian, Microsoft Office, Optro, Anecdotes, Jira, Sharepoint
3w
Save
Mark Applied
Hide
Senior Security GRC Analyst
San Mateo, California, United States
$224k-$272k/yr HybridFull Time
4+ YOE4+ years GRC experience, risk assessment and policy development, ability to work with engineers, knowledge of compliance frameworks and security controls.
Factor Analysis of Information Risk (FAIR), Roblox Studio
1mo
Save
Mark Applied
Hide
GRC SECURITY ANALYST
Reno or United States
$114k-$139k/yr RemoteFull Time
3+ YOE5+ years GRC/risk/compliance experience with Bachelor’s (or 3+ years with Master’s) or equivalent; deep knowledge of NIST, ISO, SOC 2, GLBA/CCPA/GDPR; relevant certifications (CISSP, CISM, CISA, CRISC, AIGP); familiarity with Vanta, Drata, OneTrust, cloud and DevOps; strong analytics and communication.
NIST CSF, NIST RMF, ISO 27001, ISO 27002, ISO 42001, SOC 2, GLBA, CCPA, GDPR, Vanta, Drata, OneTrust, DevOps, cloud computing
4d
Save
Mark Applied
Hide
Governance, Risk & Compliance (GRC) Analyst
Atlanta, Georgia, United States
HybridFull Time
2+ YOE2+ years GRC, risk, compliance, audit, or vendor risk experience; familiarity with SOC reports, ISO 27001, security questionnaires; strong documentation, evidence management, and stakeholder coordination; preferred CRISC/CISA/CGRC/Security+ or ISO 27001 auditor/TPrisk credentials.
3d
Save
Mark Applied
Hide
Governance Risk and Compliance (GRC) Analyst
United States
$60k-$70k/yr RemoteFull Time
Bachelor's degree, experience in security operations or GRC, familiarity with HIPAA, SOC2, HITRUST, vendor due diligence, policy development, and audit readiness.
OneTrust, Microsoft 365, Microsoft SharePoint, JIRA, Windows, macOS
2w
Save
Mark Applied
Hide
GRC Analyst – Rockville, MD
Rockville or Falls Church
OnsiteContract
1+ YOE1 year information security/IT/GRC experience preferred; bachelor\u0002s degree in related field preferred; experience with ServiceNow and Office 365; knowledge of NIST, risk scoring, HIPAA; certifications earn points.
ServiceNow, Office 365
1mo
Save
Mark Applied
Hide
Security GRC Analyst
San Francisco, California, United States
$116k-$160k/yr OnsiteFull Time
2+ YOE2–4 years GRC/compliance/audit or information security experience; working knowledge of at least two of SOC 2, HIPAA, ISO 27001, or GxP; proficiency with GRC/audit tools and Microsoft Office or Google Workspace; strong communication skills.
SOC 2, HIPAA, ISO 27001, GxP, Microsoft Office Suite, Google Workspace, Drata, Vanta, OneTrust, ServiceNow GRC
2mo
Save
Mark Applied
Hide
Governance, Risk & Compliance (GRC) Analyst
San Francisco, California, United States
$125k-$150k/yr OnsiteFull Time
3+ YOE3–5 years GRC/InfoSec/IT audit experience; hands-on SOC 2 Type II, ISO 27001, CSA STAR, ISO/IEC 42001; experience with Vanta, audits, evidence management, risk assessments, policy maintenance, and strong communication skills.
Vanta, GCP, AWS, Azure
19h
Save
Mark Applied
Hide
GRC Analyst I
Fitchburg or Madison
OnsiteFull Time
0+ YOEAssociate's or bachelor's degree in a related field and 0–3 years of GRC, risk, compliance, auditing, or related experience; strong analytical, organizational, and communication skills.
NIST CSF, NIST AI RMF, ISO 27001, ISO 31000, ISO 22301, CCPA/CPRA, GDPR, PCI DSS
Explore Jobs