TransamericaNYSE: AEG: Provides insurance, retirement solutions, and investment products to customers.
10+ YOE10+ years operational/enterprise risk experience, experience managing enterprise GRC platforms and risk data frameworks, strong ERM and operational risk knowledge, stakeholder influence and communication skills.
Information Security Governance, Risk & Compliance (GRC) Analyst
Rockville, Maryland, United States
OnsiteFull Time
ASSYST: An award-winning IT firm that delivers digital transformation, DevSecOps, cyber security, and AI integration for government agencies.
Experience in information security governance, risk management, or compliance; strong analytical, written and verbal communication, organizational skills; ability to learn new technologies and work independently.
ServiceNow Integrated Risk Management (IRM), Microsoft Office 365
Risk Consulting - Risk Technology - Oracle GRC - Manager (New York, NY, US, 10001-8604)
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or North Carolina or Philadelphia or Portland or San Francisco or Seattle or Tampa
$150k-$260k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
5+ YOEBachelor's or master's degree with ~5 years related experience; Oracle security/controls and controls testing experience; strong project management, client service, leadership, communication, analytical skills; valid US driver’s license and passport; willing to travel.
CyberLinx Solutions: Provides specialized cybersecurity and IT services to federal agencies.
8+ YOE3+ MgmtBachelor's in a related field, 8+ years in cybersecurity with 3+ years of GRC leadership, strong knowledge of NIST CSF/RMF and NIST SP 800-53/800-171, audit/compliance experience, and executive communication skills.
Steampunk: Provides digital transformation and IT consulting for federal agencies.
7+ YOELocal to Washington, DC; must be able to obtain Public Trust clearance. Requires project management certification (PMP/PRINCE2/PMI-ACP/CSM/SAFe SPC or equivalent) and 7+ years experience (Master's+7, Bachelor's+10, or 16 years without degree). Familiarity with GRC, FISMA, FedRAMP, NIST 800-53, CTEM, DevSecOps, and federal IT programs.
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
8+ YOE8+ years in ISSO/SCA/ISSE/ISSM roles; experience configuring and automating GRC platforms (ServiceNow, Archer, Xacta, eMASS); strong process/change management, policy-to-implementation translation, and knowledge of NIST RMF/FISMA/FedRAMP; U.S. citizenship required.
ServiceNow, Archer, RSA Archer, Xacta, Telos Xacta, eMASS, CSAM, API
WorkdayNASDAQ: WDAY: Provides cloud-based software for financial and human capital management.
12+ YOE12+ years GRC experience, 7+ years implementing GRC tools, BS/MS in CS/InfoSec/MIS or equivalent, expert TPRM and risk analysis, stakeholder management, and preferred advanced security certifications.
Principal Associate, Process Manager - Client Engagement & Issue Resolution
Houston or McLean or Richmond or Chicago
$99k-$113k/yrOnsiteFull Time
Capital OneNYSE: COF: Financial services offering credit cards, banking, and loans.
3+ YOEHigh school diploma/GED; 3+ years in project/process management or engineering with data analysis; 3+ years in complaint resolution/remediation; 2+ years payments experience; experience with ServiceNow/GRC, AI automation, data analysis, stakeholder management, and process documentation.
OracleNYSE: ORCL: Provides cloud infrastructure and enterprise software for global businesses.
6+ YOESenior program manager with experience leading NIST 800-53 Rev 5 compliance, GRC tooling (Xacta,eMASS), program budgeting, cross-functional coordination, and executive stakeholder communication.
Platinum Technologies: Provides cybersecurity and digital services to government agencies.
10+ YOE10+ years managing large-scale DoD/Federal IT programs, strong leadership, stakeholder engagement, RMF/NIST/Zero Trust familiarity, cloud migration and modernization experience, and ACTIVE SECRET clearance required.
Steampunk: Design-led federal technology consulting and innovation services firm.
7+ YOELead RiskOps program delivery for federal cybersecurity: oversee roadmap, coordinate cross-functional teams, manage schedules/backlogs, drive process improvements, and produce status reports and KPIs.
Tharros: Provides specialized cybersecurity defense and vulnerability research services.
15+ YOEActive TS/SCI, 15+ years managing large cybersecurity/IT programs, PMP and CISSP or CISM, experience with cybersecurity program management, strong customer-facing and communication skills.
RMF, Assessment and Authorization (A&A), DevSecOps, Zero Trust, GRC, COMSEC
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
5+ YOE5+ years compliance, audit, or risk management experience; Bachelor’s degree or equivalent required; deep knowledge of COSO 2013, SEC/PCAOB, ITGCs, SOX scoping, control design, testing, remediation, and GRC platforms.
Senior Manager, Technology Product Management - Technology & Cyber Governance - Remote or Hybrid in MN or DC
Boston or Minneapolis or Washington
$113k-$193k/yrRemoteFull Time
UnitedHealth GroupNYSE: UNH: Provides health insurance and technology-enabled health care services.
10+ YOEAssociate’s degree (or higher) in related field, 10+ years in technology/information security with risk governance experience, 5+ years in matrixed orgs; experience designing governance, risk metrics, and control assessment; preferred certifications CISA, CRISC, CISSP, CISM.
NIST CSF, ISO 27001, COBIT, SOX, FFIEC, SDLC, DevSecOps, GRC
Compliance Manager, Corporate Compliance - CoStar Group - Arlington, VA
Arlington, Virginia, United States
OnsiteFull Time
CoStar GroupNASDAQ: CSGP: Global provider of commercial and residential real estate data.
5+ YOEBachelor's degree required; 5+ years regulatory compliance and project management experience; strong analytical, communication, and MS Office skills; experience with compliance frameworks and GRC platforms preferred.
Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Osano, OneTrust, Descartes
Navy Federal Credit Union: Offers banking and financial services to the military community.
5+ YOE1+ MgmtBachelor's degree; 5+ years ServiceNow/product or platform management experience; 1–3 years managing teams; deep ServiceNow, CMDB/Discovery, cloud architecture, vendor/budget management, and SAFe experience.