ZipRecruiter

Log In

1

Contract Grc Analyst Jobs (NOW HIRING)

Merci Technologies - Talent

GRC Manager

Atlanta, GA · Remote

... a remote contract engagement. In this role, you will serve as the primary driver of the ... Mentor and guide junior GRC analysts and contribute to team capability development * Stay current ...

Redolent, Inc.

SAP Security & GRC

Charlotte, NC · On-site

... meet contract and workplan objectives * Deliver services that meet Project specifications - SAP GRC Access Control Modules (Emergency Access Management, Access Risk Analysis & Access Request ...

Tallgrass

Analyst-Cyber GRC, Sr.

Lakewood, CO · On-site

$100K - $129K/yr

The Senior Analyst, Cyber GRC supports the continued improvement of Tallgrass Energy ... Provide recommended redlines and risk-based guidance for contract requirements related to data ...

Tallgrass

Analyst-Cyber GRC, Sr.

Lakewood, CO · On-site

$99K - $128K/yr

The Senior Analyst, Cyber GRC supports the continued improvement of Tallgrass Energy ... Provide recommended redlines and risk-based guidance for contract requirements related to data ...

Kura Sushi

GRC Senior Security Analyst

Irvine, CA · On-site

$90K - $95K/yr

The GRC (Governance Risk & Compliance)-Senior Security Analyst will be responsible for safeguarding ... Reviews contracts containing Personal Identifiable Information (PII) and system components to ...

New

System One

IRM GRC ServiceNow Developer Senior

Englewood, CO · On-site

$53.25 - $73.25/hr

Contract To Hire Compensation: 130-160K Contractor Work Model: On-site Security Clearance ... Partner with Cybersecurity GRC Analysts to process audit controls, audit gaps, tickets, workflows ...

System One

IRM GRC ServiceNow Developer Senior

Englewood, CO · On-site

$53.25 - $73.25/hr

Contract To Hire Compensation: 130-160K Contractor Work Model: On-site Security Clearance ... Partner with Cybersecurity GRC Analysts to process audit controls, audit gaps, tickets, workflows ...

BIGDATAAPPTECH LLC

Senior Cybersecurity GRC

Manhattan, NY · On-site

$110K - $142K/yr

New York, NY (Onsite/Hybrid) Duration: Long-Term Contract(W2) We are seeking an experienced Senior ... Develop executive dashboards, KPIs, and risk analytics for vendor risk reporting. Recommend ...

System One

IRM GRC ServiceNow Developer Senior

Englewood, CO · On-site

$53.25 - $73.25/hr

Contract To Hire Compensation: 130-160K Contractor Work Model: On-site Security Clearance ... Partner with Cybersecurity GRC Analysts to process audit controls, audit gaps, tickets, workflows ...

System One

IRM GRC ServiceNow Developer Senior

Englewood, CO · On-site

$53.25 - $73.25/hr

Contract To Hire Compensation: 130-160K Contractor Work Model: On-site Security Clearance ... Partner with Cybersecurity GRC Analysts to process audit controls, audit gaps, tickets, workflows ...

MISO

Senior GRC Risk Analyst

Carmel, IN · On-site

$105K - $130K/yr

Join MISO as a Senior GRC Risk Analyst , where you will play a key role in safeguarding the power ... Work closely with procurement, legal, and compliance teams to ensure vendor contracts include ...

First Citizens Bank

Contract Analyst (Hybrid)

Raleigh, NC · Hybrid

$67K - $81K/yr

Contract Management - Manages queue of contracts coming up for renewal/expiration. Reviews and ... Experience with Archer governance, risk, and compliance (GRC) platform Benefits are an integral ...

New

previous page

Showing results 41-60

All JobsContract Grc Analyst Jobs

Contract Grc Analyst information

See salary details

$36.5K

$97.7K

$228.5K

How much do contract grc analyst jobs pay per year?

As of Aug 14, 2026, the average yearly pay for contract grc analyst in the United States is $97,659.00, according to ZipRecruiter salary data. Most workers in this role earn between $55,000.00 and $111,000.00 per year, depending on experience, location, and employer.

What is a contract GRC analyst?

A Contract GRC (Governance, Risk, and Compliance) Analyst is a professional who specializes in evaluating, managing, and ensuring compliance with contractual obligations within an organization. They focus on identifying risks, implementing controls, and maintaining adherence to regulatory standards related to contracts. Their work helps organizations avoid legal issues, reduce risk exposure, and maintain good governance practices. Contract GRC Analysts often collaborate with legal, procurement, and compliance teams to ensure contracts meet all internal and external requirements.

What is the difference between Contract Grc Analyst vs Contract Risk Analyst?

AspectContract Grc AnalystContract Risk Analyst
Required CertificationsGRC certifications, such as CISA or CRISCRisk management certifications, like FRM or CRM
Work EnvironmentCorporate compliance, audit, and governance teamsRisk assessment, mitigation, and analysis teams
Employer & Industry UsageFinancial services, healthcare, and tech companiesFinancial institutions, consulting firms, and corporations

Contract Grc Analysts focus on governance, risk, and compliance frameworks within organizations, ensuring adherence to policies and regulations. Contract Risk Analysts primarily evaluate and mitigate potential risks affecting business operations. While both roles involve risk assessment, GRC Analysts emphasize compliance and governance, whereas Risk Analysts concentrate on identifying and managing specific risks. Both roles often require similar certifications and are used across industries like finance and healthcare.

What are some common challenges faced by contract GRC analysts when managing third-party risk assessments?

Contract GRC Analysts often encounter challenges such as incomplete or inconsistent documentation from vendors, varying compliance standards, and tight deadlines for contract reviews. Collaborating with cross-functional teams—including legal, procurement, and IT security—can also require strong communication skills to ensure all risk factors are addressed. Staying updated on regulatory requirements and adapting assessment frameworks accordingly is essential for success in this dynamic role.

What are the key skills and qualifications needed to thrive as a contract GRC analyst?

To thrive as a Contract GRC Analyst, you need expertise in governance, risk management, and compliance processes, often supported by a bachelor's degree in a related field and experience with contract review. Familiarity with GRC tools like RSA Archer, compliance management systems, and certifications such as CISA or CRISC are highly valued. Strong analytical thinking, attention to detail, and effective communication skills help you interpret complex regulations and collaborate with cross-functional teams. These skills and qualifications ensure robust risk mitigation, regulatory adherence, and efficient contract management within organizations.
More about Contract Grc Analyst jobs

What cities are hiring for Contract Grc Analyst jobs?

Cities with the most Contract Grc Analyst job openings:

What are the most commonly searched types of Grc Analyst jobs?

The most popular types of Grc Analyst jobs are:

What states have the most Contract Grc Analyst jobs?

States with the most job openings for Contract Grc Analyst jobs include:

What job categories do people searching Contract Grc Analyst jobs look for?

The top searched job categories for Contract Grc Analyst jobs are:

Contract Grc Analyst jobs near you
Infographic showing various Contract Grc Analyst job openings in the United States as of August 2026, with employment types broken down into 53% Full Time, and 47% Contract. Highlights an 79% In-person, and 21% Remote job distribution, with an average salary of $97,659 per year, or $47 per hour.

GRC Manager

Merci Technologies - Talent

Atlanta, GA • Remote

Full-time

Re-posted 20 days ago

Job description

About the Role

Merci Technologies is seeking an experienced GRC Manager to lead governance, risk, and compliance initiatives for one of our enterprise clients on a remote contract engagement. In this role, you will serve as the primary driver of the organization's GRC program — overseeing policy development, risk assessments, audit readiness, and regulatory compliance across a complex technology environment.

The GRC Manager will work closely with legal, IT security, operations, and executive leadership to ensure the organization maintains a strong and defensible compliance posture while enabling business objectives.

Responsibilities

  • Lead the design, implementation, and ongoing management of the enterprise GRC program including policies, standards, and procedures
  • Conduct and oversee enterprise risk assessments, identify control gaps, and develop risk treatment plans aligned to business priorities
  • Manage audit and assessment activities including SOC 2, ISO 27001, NIST CSF, CMMC, or equivalent frameworks
  • Develop and maintain the organization's risk register, tracking remediation progress and reporting status to senior leadership
  • Collaborate with IT, legal, and business teams to ensure compliance with applicable regulations including GDPR, CCPA, HIPAA, or industry-specific requirements
  • Oversee third-party vendor risk management activities including assessments, due diligence, and ongoing monitoring
  • Develop and deliver security awareness and compliance training programs for internal stakeholders
  • Prepare executive-level reports, dashboards, and presentations on risk posture, compliance status, and program maturity
  • Mentor and guide junior GRC analysts and contribute to team capability development
  • Stay current on emerging regulatory developments and industry best practices and translate them into actionable program updates

Required Qualifications

  • 7–10 years of experience in GRC, information security, or risk management roles with at least 2 years in a leadership or management capacity
  • Deep knowledge of GRC frameworks and standards including NIST CSF, NIST 800-53, ISO 27001, SOC 2, and CIS Controls
  • Hands-on experience managing compliance programs across regulated industries such as healthcare, finance, energy, or government
  • Strong understanding of third-party and vendor risk management practices
  • Experience leading internal and external audit engagements from preparation through closure
  • Excellent written and verbal communication skills with demonstrated ability to present to executive and board-level audiences
  • Strong project management skills with ability to manage multiple concurrent initiatives in a remote environment
  • Must be legally authorized to work in the United States without employer sponsorship

Preferred Qualifications

  • Active certifications such as CISA, CRISC, CISM, CISSP, or ISO 27001 Lead Auditor
  • Experience with GRC platforms such as ServiceNow GRC, Archer, OneTrust, or equivalent
  • Familiarity with CMMC, NERC CIP, or FedRAMP compliance requirements
  • Experience supporting M&A security due diligence or post-merger integration activities
  • Background working in a managed services or consulting environment