ZipRecruiter

Log In

1

Cyber Grc Jobs (NOW HIRING)

next page

Showing results 1-20

All JobsCyber Grc Jobs

Cyber GRC information

See salary details

$38.5K

$58.2K

$87K

How much do cyber grc jobs pay per year?

As of Jul 3, 2026, the average yearly pay for cyber grc in the United States is $58,171.00, according to ZipRecruiter salary data. Most workers in this role earn between $48,000.00 and $64,500.00 per year, depending on experience, location, and employer.

Is GRC cybersecurity in demand?

Cyber GRC (Governance, Risk, and Compliance) professionals are in high demand due to increasing cybersecurity regulations and the need for organizations to manage risk effectively. Skills in compliance frameworks, risk assessment, and security policies are highly valued, and certifications like CISA or CISSP can enhance job prospects in this field.

What is Cyber GRC?

Cyber GRC stands for Cyber Governance, Risk, and Compliance. It refers to the integrated collection of capabilities that enable an organization to reliably achieve objectives, address uncertainty, and act with integrity when managing cybersecurity risks. Professionals in Cyber GRC help organizations develop policies, assess risks, comply with regulations, and ensure ongoing security governance. Their work is essential for building strong cybersecurity frameworks and maintaining compliance with laws such as GDPR, HIPAA, or PCI DSS.

What are some common challenges faced by professionals in Cyber GRC roles and how can they be addressed?

Professionals in Cyber GRC (Governance, Risk, and Compliance) roles often encounter challenges such as keeping up with constantly evolving regulations, ensuring company-wide compliance, and effectively communicating risk to stakeholders. To address these challenges, it's important to stay updated on industry standards, leverage automated GRC tools to streamline processes, and develop strong communication skills to translate technical risks into business terms. Collaboration with IT, legal, and business teams is also essential for creating a robust compliance culture.

Can you make $500,000 a year in cyber security?

Cyber GRC (Governance, Risk, and Compliance) professionals can potentially earn high salaries, especially with extensive experience, advanced certifications, and leadership roles. However, reaching a $500,000 annual income typically requires senior positions, specialized skills, or working in high-paying industries or organizations. Most cybersecurity roles offer salaries below this level, but top executives and consultants can achieve such earnings.

How much do cyber GRC specialists make?

Cyber GRC (Governance, Risk, and Compliance) specialists typically earn between $70,000 and $130,000 annually, depending on experience, certifications, and location. Senior roles or those with advanced certifications like CISSP or CISA can earn higher salaries, especially in larger organizations or high-demand markets.

What is the difference between Cyber Grc vs Cyber Security Analyst?

AspectCyber GrcCyber Security Analyst
CertificationsISO 27001 Lead Implementer, CISSP, CISACompTIA Security+, CISSP, CEH
Work EnvironmentPolicy development, risk management, compliance teamsSecurity monitoring, incident response, vulnerability assessment
Employer & Industry UsageFinancial, healthcare, government sectors focusing on governanceIT security teams across various industries

Cyber Grc professionals focus on establishing policies, managing risks, and ensuring compliance within organizations. In contrast, Cyber Security Analysts primarily monitor security systems, respond to incidents, and identify vulnerabilities. While both roles require certifications like CISSP, their daily tasks and focus areas differ significantly, with Grc emphasizing governance and analysts focusing on technical security operations.

Is GRC an entry level job?

Cyber GRC (Governance, Risk, and Compliance) roles can be entry-level, especially for those with foundational knowledge of cybersecurity principles, risk management, and compliance frameworks. However, many positions may require some experience or certifications such as CISA or CISSP, depending on the complexity of the role.

What are the key skills and qualifications needed to thrive as a Cyber GRC (Governance, Risk, and Compliance) professional, and why are they important?

To thrive as a Cyber GRC professional, you need expertise in risk assessment, compliance frameworks (such as ISO 27001, NIST, or GDPR), and a solid understanding of cybersecurity principles, often backed by a degree in information security or related fields. Familiarity with GRC tools like Archer, ServiceNow GRC, or MetricStream, as well as certifications such as CISA, CISSP, or CRISC, is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for managing policies and engaging stakeholders. These skills ensure organizations can identify, manage, and mitigate cyber risks while maintaining regulatory compliance and protecting sensitive information.
More about Cyber GRC jobs
What cities are hiring for Cyber Grc jobs? Cities with the most Cyber Grc job openings:
What states have the most Cyber Grc jobs? States with the most job openings for Cyber Grc jobs include:
What job categories do people searching Cyber Grc jobs look for? The top searched job categories for Cyber Grc jobs are:
Cyber GRC jobs near you
Infographic showing various Cyber Grc job openings in the United States as of June 2026, with employment types broken down into 99% Full Time, and 1% Contract. Highlights an 76% Physical, 7% Hybrid, and 17% Remote job distribution, with an average salary of $58,171 per year, or $28 per hour.
Cyber - SAP Security and GRC Access & Process Control Manager

Cyber - SAP Security and GRC Access & Process Control Manager

Deloitte

Raleigh, NC • On-site

Other

Posted 5 days ago

Deloitte rating

8.0

Company rating: 8.0 out of 10

Based on 89 frontline employees who took The Breakroom Quiz

71st of 146 rated financial services

Job description

SAP Security and GRC Manager / Engineering Manager II

Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver solutions that help clients navigate evolving threats, strengthen resilience, and support secure business transformation. In this role, you will help organizations manage SAP security and governance, risk, and compliance requirements across implementation and transformation programs.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As an Engineering Manager II on the Enterprise Security team, you will be responsible for supporting SAP security and GRC implementations, assessments, and transformation initiatives across client environments.

  • Lead SAP ECC and SAP S/4HANA security assessments, design, and implementation activities across complex business and technology environments
  • Design, build, test, and deploy end-user and IT support security roles across SAP platforms, including Fiori, Ariba, Integrated Business Planning, Business Technology Platform, and Business Data Cloud
  • Configure and implement SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management
  • Support SAP GRC Process Control design and configuration, including controls, risks, subprocesses, organizations, assignments, and continuous control monitoring capabilities
  • Manage project workstreams, client stakeholders, and delivery teams while providing recommendations on SAP security role design, segregation of duties, vulnerability findings, and regulatory control requirements

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to mentor and provide clear guidance to others

The team

Deloitte's Enterprise Security Offering helps clients embed security across digital transformation initiatives by securing core technology environments while enabling business change. The team supports work spanning security architecture, secure development and deployment, cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Qualifications

Required:

  • Bachelor's degree
  • 8+ years of experience with SAP S/4HANA security and SAP Governance, Risk, and Compliance (GRC) Access Control
  • 8+ years of hands-on experience implementing security for SAP S/4HANA, Fiori, Ariba, Integrated Business Planning (IBP), Business Technology Platform (BTP), and Business Data Cloud (BDC), including requirement gathering, security design, and deployment
  • Demonstrated delivery of 3+ full-cycle SAP GRC Access Control implementation projects, SAP S/4HANA security implementations, and 2+ SAP GRC Process Control implementations
  • 5+ years of experience designing, configuring, and implementing SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • Previous consulting experience
  • Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
  • Experience with SAP identity and access governance
  • Experience with cloud security and cloud migrations
  • Experience with SAP business process controls and data protection tools such as NextLabs
  • Experience with vulnerability management tools such as Onapsis

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Qualifications:

SAP Security and GRC Manager / Engineering Manager II

Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver solutions that help clients navigate evolving threats, strengthen resilience, and support secure business transformation. In this role, you will help organizations manage SAP security and governance, risk, and compliance requirements across implementation and transformation programs.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As an Engineering Manager II on the Enterprise Security team, you will be responsible for supporting SAP security and GRC implementations, assessments, and transformation initiatives across client environments.

  • Lead SAP ECC and SAP S/4HANA security assessments, design, and implementation activities across complex business and technology environments
  • Design, build, test, and deploy end-user and IT support security roles across SAP platforms, including Fiori, Ariba, Integrated Business Planning, Business Technology Platform, and Business Data Cloud
  • Configure and implement SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management
  • Support SAP GRC Process Control design and configuration, including controls, risks, subprocesses, organizations, assignments, and continuous control monitoring capabilities
  • Manage project workstreams, client stakeholders, and delivery teams while providing recommendations on SAP security role design, segregation of duties, vulnerability findings, and regulatory control requirements

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to mentor and provide clear guidance to others

The team

Deloitte's Enterprise Security Offering helps clients embed security across digital transformation initiatives by securing core technology environments while enabling business change. The team supports work spanning security architecture, secure development and deployment, cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Qualifications

Required:

  • Bachelor's degree
  • 8+ years of experience with SAP S/4HANA security and SAP Governance, Risk, and Compliance (GRC) Access Control
  • 8+ years of hands-on experience implementing security for SAP S/4HANA, Fiori, Ariba, Integrated Business Planning (IBP), Business Technology Platform (BTP), and Business Data Cloud (BDC), including requirement gathering, security design, and deployment
  • Demonstrated delivery of 3+ full-cycle SAP GRC Access Control implementation projects, SAP S/4HANA security implementations, and 2+ SAP GRC Process Control implementations
  • 5+ years of experience designing, configuring, and implementing SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • Previous consulting experience
  • Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
  • Experience with SAP identity and access governance
  • Experience with cloud security and cloud migrations
  • Experience with SAP business process controls and data protection tools such as NextLabs
  • Experience with vulnerability management tools such as Onapsis

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Education:Bachelor's DegreeEmployment Type:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply