ZipRecruiter

Log In

1

Cgrc Jobs in Silver Spring, MD (NOW HIRING)

next page

Showing results 1-20

All JobsCgrc JobsCgrc Jobs in Silver Spring, MD

Cgrc information

What is the 3 month rule for jobs?

The 3 month rule for jobs, including roles like CGRC, typically refers to a probationary period of three months during which an employee's performance and fit for the role are evaluated. This period allows employers to assess skills, adapt to the work environment, and determine if the employee will be retained or extended benefits. It is common in many organizations to set this timeframe for initial performance reviews and potential confirmation of employment.

What are CGRC professionals?

CGRC professionals, or Certified in Governance, Risk and Compliance, are experts who help organizations manage risk, ensure regulatory compliance, and establish effective governance frameworks. They analyze processes, identify potential risks, and develop policies to maintain compliance with laws and industry standards. CGRC certification, previously known as CAP (Certified Authorization Professional), is offered by (ISC)² and validates knowledge in governance, risk management, and compliance best practices. These professionals often work in cybersecurity, IT, or regulatory roles across various industries.

Is GRC an entry level job?

GRC (Governance, Risk, and Compliance) roles can be entry-level or require experience depending on the specific position. Entry-level GRC jobs typically focus on basic compliance tasks and may require foundational knowledge of cybersecurity or risk management, often supported by certifications like CISA or CISSP. More advanced roles involve managing complex frameworks and usually demand prior experience in security or audit functions.

What are the key skills and qualifications needed to thrive as a Cybersecurity Governance, Risk, and Compliance (CGRC) professional, and why are they important?

To thrive as a CGRC professional, you need a solid understanding of cybersecurity frameworks, risk management, and regulatory compliance, typically supported by a relevant degree and certifications such as CISSP, CISA, or CGRC (formerly CAP). Familiarity with GRC platforms like Archer, ServiceNow GRC, or RSA, as well as knowledge of NIST, ISO, or HIPAA standards, is commonly required. Strong analytical skills, attention to detail, and effective communication are crucial soft skills for interpreting regulations and collaborating across teams. These competencies ensure organizations remain secure and compliant, minimizing risk and avoiding costly penalties.

What is the difference between Cgrc vs Compliance Analyst?

AspectCgrcCompliance Analyst
CertificationsCertifications like CFE, CISA, or CMMC often preferredCertifications such as CCEP, CISA, or CIA common
Work EnvironmentTypically in cybersecurity, risk management, or compliance teams within organizationsUsually in corporate compliance departments, auditing firms, or regulatory agencies
Industry UsageUsed in industries like finance, healthcare, and government for cybersecurity and risk managementCommon across various industries for regulatory compliance and risk assessment

The Cgrc (Certified Government Risk Compliance) focuses on government-specific regulations and cybersecurity risk management, while a Compliance Analyst generally handles broader regulatory compliance across industries. Both roles require understanding of compliance frameworks, but Cgrc emphasizes government standards and cybersecurity, making it more specialized in those areas.

What jobs pay 500,000 a year in the US?

High-paying jobs that can reach or exceed $500,000 annually in the US include executive roles such as CEOs and CFOs, top-tier surgeons, specialized attorneys, and successful entrepreneurs. These positions often require advanced degrees, extensive experience, leadership skills, and sometimes ownership or equity stakes in companies.

What are some common challenges CGRC professionals face when managing compliance across multiple frameworks?

CGRC (Cybersecurity Governance, Risk, and Compliance) professionals often encounter the challenge of aligning organizational policies with the requirements of various regulatory frameworks, such as NIST, ISO 27001, and GDPR. This can involve interpreting overlapping or conflicting controls and ensuring consistent documentation and reporting. Additionally, they must facilitate communication and collaboration between IT, legal, and business teams to ensure all stakeholders understand and meet compliance obligations. Keeping up with the evolving regulatory landscape and adapting internal processes accordingly is also a key aspect of the role.

What is the best job for someone with OCD?

For a role like CGRC, which involves compliance, risk management, and detailed documentation, individuals with OCD may find comfort in structured, predictable tasks that require attention to detail. Jobs that involve routine procedures, clear guidelines, and minimal unexpected changes can help manage symptoms effectively. Certifications in relevant fields and a stable work environment can also support success in such roles.
What are popular job titles related to Cgrc jobs in Silver Spring, MD? For Cgrc jobs in Silver Spring, MD, the most frequently searched job titles are:
What job categories do people searching Cgrc jobs in Silver Spring, MD look for? The top searched job categories for Cgrc jobs in Silver Spring, MD are:
What cities near Silver Spring, MD are hiring for Cgrc jobs? Cities near Silver Spring, MD with the most Cgrc job openings:
Cgrc jobs near you
Infographic showing various Cgrc job openings in Silver Spring, MD as of July 2026, with employment types broken down into 82% Full Time, 6% Part Time, and 12% Contract. Highlights an 89% Physical, 4% Hybrid, and 7% Remote job distribution.
Certified Information Systems Auditor (CISA)

Certified Information Systems Auditor (CISA)

Accenture Federal Services

Arlington, VA • On-site

Other

Posted 22 days ago

Accenture Federal Services rating

8.4

Company rating: 8.4 out of 10

Based on 19 frontline employees who took The Breakroom Quiz

59th of 487 rated business services

Job description

Job Description:

The Certified Information Systems Auditor (CISA) will be responsible for planning and executing audits of the client's information systems and controls to ensure compliance, mitigate risk, and demonstrate operational effectiveness. Assist with the technical preparation for the annual SOC 1 audit by evaluating and testing IT General Controls (ITGCs), including change management, logical access, and IT operations. Assess the design and operating effectiveness of security controls in support of the Risk Management Framework (RMF) authorization. Develop audit plans, execute control testing procedures, and collect evidence to demonstrate compliance with DoD policies and industry best practices. Collaborate with engineering and operations teams to review system configurations, audit logs, and process documentation, identifying control deficiencies and providing actionable recommendations for remediation.

What you need:

  • Candidates must meet one of the following areas:
    1. Equivalent Training:
      Completion of one of the following accepted training programs: 
      • IT Program Auditor (Intermediate) Playlist
    2. Professional Certification:
      Holding one of these certifications:
      • SecurityX / CASP+
      • CGRC/CAP
      • GSEC
      • GSNA
      • Security+
      • SSCP
  • 4 years of experience with IT audit/compliance experience
  • Experience conducting audits (ideally SOC, NIST, or RMF)

Security Clearance:

  • Active Secret, Top Secret, TS/SCI, or TS/SCI with Polygraph clearance required, depending on position

What Accenture Federal Services employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply