1

Cyber Security Grc Jobs in Raleigh, NC (NOW HIRING)

Over the years, ACA has grown both organically and by acquisition to expand our GRC business and technology solutions. Our services now include GIPS standards verification, cybersecurity and ...

Over the years, ACA has grown both organically and by acquisition to expand our GRC business and technology solutions. Our services now include GIPS standards verification, cybersecurity and ...

Bachelor's degree in computer science, information systems, risk management, cybersecurity ... Experience using GRC platforms, vulnerability management tools, ticketing systems, evidence ...

Sr Program Manager, Continuous Monitoring

Cary, NC · On-site

$108K - $109K/yr

Bachelor's degree in computer science, information systems, risk management, cybersecurity ... Experience using GRC platforms, vulnerability management tools, ticketing systems, evidence ...

... cybersecurity. * Hands-on experience with ISO certification programs, audit coordination, and compliance operations . * Familiarity with GRC tools, policy governance processes, and audit evidence ...

next page

Showing results 1-20

Cyber Security Grc information

See Raleigh, NC salary details

$39.4K

$119.5K

$175K

How much do cyber security grc jobs pay per year?

As of Aug 6, 2026, the average yearly pay for cyber security grc in Raleigh, NC is $119,459.00, according to ZipRecruiter salary data. Most workers in this role earn between $99,200.00 and $138,000.00 per year, depending on experience, location, and employer.

Is cyber security GRC a good job?

Cyber security GRC (Governance, Risk, and Compliance) is a growing field that offers opportunities in risk management, policy development, and compliance auditing. It typically requires knowledge of security frameworks, regulations, and tools like audit software, and can provide stable employment with potential for career advancement. The role is suitable for those interested in both technical and organizational aspects of cybersecurity.

What are some common challenges faced by Cyber Security GRC professionals, and how do they typically overcome them?

Cyber Security GRC professionals often face the challenge of keeping up with evolving regulations, adapting controls for new technologies, and coordinating between security teams and business units. To overcome these challenges, professionals stay current with industry standards, participate in ongoing training, and actively communicate policy changes and risk assessments to stakeholders across the organization. They also leverage robust GRC tools to streamline compliance processes and documentation. Working collaboratively with IT, legal, and compliance teams allows them to better identify risks and implement effective, practical security controls. This approach ensures a well-integrated and proactive risk management posture for the organization.

What is a Cyber Security GRC?

A Cyber Security GRC (Governance, Risk, and Compliance) job focuses on ensuring an organization's security policies, risk management strategies, and regulatory compliance. Professionals in this role develop and enforce security policies, assess risks, and ensure adherence to industry regulations like GDPR, HIPAA, or ISO 27001. They collaborate with different teams to mitigate cybersecurity threats while aligning security practices with business goals. This role is critical for maintaining an organization's security posture and reducing potential risks.

Is cyber security GRC in high demand?

Cyber security GRC (Governance, Risk, and Compliance) professionals are in high demand due to increasing cybersecurity threats and regulatory requirements. Organizations seek experts with skills in risk management, compliance frameworks, and security policies, often requiring certifications like CISSP or CISA. The role offers strong job growth prospects across various industries.

What are the key skills and qualifications needed to thrive in the Cyber Security GRC position?

To thrive as a Cyber Security GRC professional, a solid understanding of information security frameworks, risk management, and regulatory compliance is essential, often supported by a degree in information security or a related field. Familiarity with GRC platforms (such as Archer, ServiceNow, or LogicGate), and certifications like CISSP, CISM, or CRISC, are highly valued. Excellent analytical skills, attention to detail, and the ability to communicate complex risks to non-technical stakeholders are critical soft skills. These capabilities ensure organizations remain secure, compliant, and able to effectively manage evolving cyber risks.

What are the most commonly searched types of Cyber Security Grc jobs in Raleigh, NC? The most popular types of Cyber Security Grc jobs in Raleigh, NC are:
What are popular job titles related to Cyber Security Grc jobs in Raleigh, NC? For Cyber Security Grc jobs in Raleigh, NC, the most frequently searched job titles are:
What job categories do people searching Cyber Security Grc jobs in Raleigh, NC look for? The top searched job categories for Cyber Security Grc jobs in Raleigh, NC are:
What cities near Raleigh, NC are hiring for Cyber Security Grc jobs? Cities near Raleigh, NC with the most Cyber Security Grc job openings:
Infographic showing various Cyber Security Grc job openings in Raleigh, NC as of August 2026, with employment types broken down into 67% Full Time, and 33% Contract. Highlights an 100% In-person job distribution, with an average salary of $119,459 per year, or $57.4 per hour.

Cyber - SAP Security and GRC Access & Process Control Manager

Deloitte

Raleigh, NC

Other

Re-posted 8 days ago


Deloitte rating

8.2

Company rating: 8.2 out of 10

Based on 92 frontline employees who took The Breakroom Quiz

46th of 150 rated financial services


Job description

SAP Security and GRC Manager / Engineering Manager II

Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver solutions that help clients navigate evolving threats, strengthen resilience, and support secure business transformation. In this role, you will help organizations manage SAP security and governance, risk, and compliance requirements across implementation and transformation programs.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As an Engineering Manager II on the Enterprise Security team, you will be responsible for supporting SAP security and GRC implementations, assessments, and transformation initiatives across client environments.

  • Lead SAP ECC and SAP S/4HANA security assessments, design, and implementation activities across complex business and technology environments
  • Design, build, test, and deploy end-user and IT support security roles across SAP platforms, including Fiori, Ariba, Integrated Business Planning, Business Technology Platform, and Business Data Cloud
  • Configure and implement SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management
  • Support SAP GRC Process Control design and configuration, including controls, risks, subprocesses, organizations, assignments, and continuous control monitoring capabilities
  • Manage project workstreams, client stakeholders, and delivery teams while providing recommendations on SAP security role design, segregation of duties, vulnerability findings, and regulatory control requirements

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to mentor and provide clear guidance to others

The team

Deloitte's Enterprise Security Offering helps clients embed security across digital transformation initiatives by securing core technology environments while enabling business change. The team supports work spanning security architecture, secure development and deployment, cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Qualifications

Required:

  • Bachelor's degree
  • 8+ years of experience with SAP S/4HANA security and SAP Governance, Risk, and Compliance (GRC) Access Control
  • 8+ years of hands-on experience implementing security for SAP S/4HANA, Fiori, Ariba, Integrated Business Planning (IBP), Business Technology Platform (BTP), and Business Data Cloud (BDC), including requirement gathering, security design, and deployment
  • Demonstrated delivery of 3+ full-cycle SAP GRC Access Control implementation projects, SAP S/4HANA security implementations, and 2+ SAP GRC Process Control implementations
  • 5+ years of experience designing, configuring, and implementing SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • Previous consulting experience
  • Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
  • Experience with SAP identity and access governance
  • Experience with cloud security and cloud migrations
  • Experience with SAP business process controls and data protection tools such as NextLabs
  • Experience with vulnerability management tools such as Onapsis

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Qualifications:

SAP Security and GRC Manager / Engineering Manager II

Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver solutions that help clients navigate evolving threats, strengthen resilience, and support secure business transformation. In this role, you will help organizations manage SAP security and governance, risk, and compliance requirements across implementation and transformation programs.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As an Engineering Manager II on the Enterprise Security team, you will be responsible for supporting SAP security and GRC implementations, assessments, and transformation initiatives across client environments.

  • Lead SAP ECC and SAP S/4HANA security assessments, design, and implementation activities across complex business and technology environments
  • Design, build, test, and deploy end-user and IT support security roles across SAP platforms, including Fiori, Ariba, Integrated Business Planning, Business Technology Platform, and Business Data Cloud
  • Configure and implement SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management
  • Support SAP GRC Process Control design and configuration, including controls, risks, subprocesses, organizations, assignments, and continuous control monitoring capabilities
  • Manage project workstreams, client stakeholders, and delivery teams while providing recommendations on SAP security role design, segregation of duties, vulnerability findings, and regulatory control requirements

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to mentor and provide clear guidance to others

The team

Deloitte's Enterprise Security Offering helps clients embed security across digital transformation initiatives by securing core technology environments while enabling business change. The team supports work spanning security architecture, secure development and deployment, cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Qualifications

Required:

  • Bachelor's degree
  • 8+ years of experience with SAP S/4HANA security and SAP Governance, Risk, and Compliance (GRC) Access Control
  • 8+ years of hands-on experience implementing security for SAP S/4HANA, Fiori, Ariba, Integrated Business Planning (IBP), Business Technology Platform (BTP), and Business Data Cloud (BDC), including requirement gathering, security design, and deployment
  • Demonstrated delivery of 3+ full-cycle SAP GRC Access Control implementation projects, SAP S/4HANA security implementations, and 2+ SAP GRC Process Control implementations
  • 5+ years of experience designing, configuring, and implementing SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • Previous consulting experience
  • Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
  • Experience with SAP identity and access governance
  • Experience with cloud security and cloud migrations
  • Experience with SAP business process controls and data protection tools such as NextLabs
  • Experience with vulnerability management tools such as Onapsis

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Education:Bachelor's DegreeEmployment Type:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom