ZipRecruiter

Log In

1

Cybersecurity Governance Risk Compliance Jobs (NOW HIRING)

IDEXX Laboratories

Our cybersecurity and information security teams at IDEXX contribute to a more resilient, adaptable ... As the Director of the Trust Office (Cyber Governance, Risk & Compliance) , you will lead the ...

next page

Showing results 1-20

All JobsCybersecurity Governance Risk Compliance Jobs

Cybersecurity Governance Risk Compliance information

See salary details

$23K

$113.7K

$150.5K

How much do cybersecurity governance risk compliance jobs pay per year?

As of Jul 23, 2026, the average yearly pay for cybersecurity governance risk compliance in the United States is $113,704.00, according to ZipRecruiter salary data. Most workers in this role earn between $100,000.00 and $129,000.00 per year, depending on experience, location, and employer.

What is the difference between Cybersecurity Governance Risk Compliance vs Cybersecurity Analyst?

AspectCybersecurity Governance Risk ComplianceCybersecurity Analyst
CertificationsCISA, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentPolicy development, audits, compliance frameworksMonitoring security systems, incident response
Employer & Industry UsageOrganizations with compliance needs, regulatory bodiesIT security teams, cybersecurity firms

While Cybersecurity Governance Risk Compliance focuses on establishing policies, ensuring regulatory adherence, and managing risks, Cybersecurity Analysts primarily monitor security systems, analyze threats, and respond to incidents. Both roles are essential in a comprehensive cybersecurity strategy but differ in scope and daily responsibilities.

What are the key skills and qualifications needed to thrive as a Cybersecurity Governance, Risk, and Compliance (GRC) professional, and why are they important?

To thrive as a Cybersecurity GRC professional, you need a solid understanding of information security frameworks, risk management principles, and regulatory compliance, often supported by a degree in cybersecurity or related fields. Familiarity with tools like GRC platforms (e.g., Archer, ServiceNow), and certifications such as CISSP, CISM, or CRISC are highly valued. Strong analytical thinking, attention to detail, and effective communication skills help you interpret regulations and collaborate with stakeholders. These skills ensure organizations can manage cybersecurity risks proactively while meeting regulatory and industry standards.

What are some typical challenges faced by professionals in Cybersecurity Governance, Risk, and Compliance (GRC) roles?

Professionals in Cybersecurity GRC roles often navigate the challenge of keeping up with rapidly changing regulatory requirements while ensuring company policies align with both business objectives and security best practices. Balancing the need for robust security controls with operational efficiency, educating non-technical stakeholders about risk, and managing audits are common aspects of the job. Additionally, GRC professionals frequently collaborate with IT, legal, and business teams to ensure a cohesive approach to risk management and compliance. This dynamic environment requires strong communication skills, adaptability, and a commitment to continuous learning.

What is Cybersecurity Governance, Risk, and Compliance (GRC)?

Cybersecurity Governance, Risk, and Compliance (GRC) refers to a framework used by organizations to align their IT and security strategies with business objectives, manage risks, and ensure compliance with laws and regulations. Governance involves setting policies and procedures, risk focuses on identifying and addressing threats, and compliance ensures adherence to required standards. Professionals in this field help organizations protect sensitive data, avoid regulatory penalties, and build trust with stakeholders. GRC is essential for maintaining effective cybersecurity and demonstrating due diligence.
More about Cybersecurity Governance Risk Compliance jobs
What cities are hiring for Cybersecurity Governance Risk Compliance jobs? Cities with the most Cybersecurity Governance Risk Compliance job openings:
What states have the most Cybersecurity Governance Risk Compliance jobs? States with the most job openings for Cybersecurity Governance Risk Compliance jobs include:
What job categories do people searching Cybersecurity Governance Risk Compliance jobs look for? The top searched job categories for Cybersecurity Governance Risk Compliance jobs are:
Cybersecurity Governance Risk Compliance jobs near you
Infographic showing various Cybersecurity Governance Risk Compliance job openings in the United States as of July 2026, with employment types broken down into 1% As Needed, 82% Full Time, 12% Part Time, and 5% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $113,704 per year, or $54.7 per hour.
Director, Global Cybersecurity - Governance, Risk, Compliance & Identity

Director, Global Cybersecurity - Governance, Risk, Compliance & Identity

Donaldson Company, Inc.

Bloomington, MN • On-site

$158K - $211K/yr

Full-time

Medical, Retirement

Posted 14 days ago

Job description

Donaldson is committed to solving the world's most complex filtration challenges. Together, we make cool things. As an established technology and innovation leader, we are continuously evolving to meet the filtration needs of our changing world. Join a culture of collaboration and innovation that matters and a chance to learn, effect change, and make meaningful contributions at work and in communities.
The Director, Global Cybersecurity Governance, Risk, Compliance & Identity is accountable for defining and executing Donaldson's enterprise cybersecurity governance and risk management strategy, while ensuring a consistent, integrated control environment across IT, OT, and product ecosystems.
Provide direct leadership of the global Governance Risk Compliance (GRC) function and responsibility for Identity & Access Management (IAM/ICAM) and Operational Technology (OT) Security programs, ensuring alignment to regulatory requirements, risk, and business objectives.
Build and maintain strong partnerships across the enterprise to embed security operations & compliance requirements into platforms and processes; serve as an escalation point for high-impact events and customer/security assurance needs.
As an advisor to executive leadership, this role drives decision-making across global manufacturing, digital transformation, and product innovation, strengthening Donaldson's security while enabling the business.
Key Responsibilities
  • Integrate GRC, IAM, and OT security into a unified cybersecurity risk model
  • Support M&A due diligence and integration from a cybersecurity and compliance perspective
  • Develop, mentor, and retain a high-performing security operations organization, including hiring strategy, succession planning, performance management, and a culture of accountability and learning
  • Establish and maintain cybersecurity KPIs, KRIs, and dashboards
  • Advise leadership on risk, investment priorities, and regulatory exposure
  • Drive continuous improvement of the enterprise control environment

Governance, Risk & Compliance
  • Direct leadership of the global GRC organization, including governance, risk management, compliance, and audit functions
  • Define and mature enterprise cybersecurity governance frameworks, policies, and standards
  • Establish an integrated risk management program spanning IT, OT, cloud, and third parties
  • Own regulatory, legal, and customer-driven compliance programs (e.g., SOX, GDPR, CMMC, and TISAX)
  • Oversee audits, regulatory engagements, and customer security assessments
  • Deliver cyber risk reporting and board-facing materials

Identity & Access Management
  • Provide strategic oversight of the IAM/ICAM function, including identity lifecycle, access governance, and privileged access using SailPoint ISC as the core platform, powered by ServiceNow and other technologies.
  • Align IAM capabilities with Zero Trust architecture and security strategy
  • Drive identity risk through metrics, reporting, and control effectiveness
  • Partner with IAM leadership to ensure scalable, compliant identity services across global operations
  • Define, implement, and operate the use and impact of GenAI within IAM landscape along with use of GenAI in the ecosystem

Operational Technology (OT) Security
  • Provide strategic oversight of OT cybersecurity strategy and governance across manufacturing, labs, and ICS environments
  • Appy consistent security controls and risk management practices across plants and, lab environments
  • Partner with OT and manufacturing & technical leaders to embed security into system lifecycle and operations
  • Align OT security with regulatory, safety, and business continuity requirements

Minimum Qualifications
  • Bachelor's degree in Cybersecurity, Computer Science, Engineering, Risk Management, or related field
  • 10+ years of progressive experience in cybersecurity, GRC, or identity management
  • Experience managing budgets and vendors, building multi-year roadmaps, and delivering measurable outcomes through program and portfolio management
  • Proven experience leading enterprise GRC functions
  • Strong working knowledge of NIST CSF, NIST 800-53, ISO 27001, and SOC frameworks
  • Experience with global regulatory and compliance programs (such as SOX, GDPR, PCI DSS, CMMC, TISAX)
  • Experience collaborating with IAM and/or OT security leadership in large-scale environments
  • Professional certifications (such as CISSP, CISM, CRISC, or CISA)
  • Demonstrated experience operating in complex, global organizations
  • This role is on-site at our world headquarters in Bloomington, MN

Preferred Qualifications
  • Experience in global manufacturing, lab environment, or OT-intensive environments
  • Familiarity with Zero Trust, cloud security, and AI governance frameworks
  • Strong communication and board-level presentation capabilities
  • Proven ability to influence across matrixed IT, security, and business teams

Annual Salary Range: $158,000 - 211,300. Actual salaries will vary based on several factors including, but not limited to applicable work experience, training, education, performance.
Employee benefits are part of the competitive total rewards package that Donaldson Company, Inc. provides to you. Our comprehensive benefits program includes health benefits, retirement plan (401k), paid time away, paid leaves (including paid parental leave) and more.
Employment opportunities for positions in the United States may require use of information which is subject to the export control regulations of the United States. Hiring decisions for such positions are required by law to be made in compliance with these regulations. Applicants for employment opportunities in other countries must be able to meet the comparable export control requirements of that country and of the United States.
Donaldson Company has been made aware that there are several recruiting scams that are targeting job seekers. These scams have attempted to solicit money for job applications and/or collect confidential information, Donaldson will never solicit money during the application or recruiting process. Donaldson only accepts online applications through our Careers | Donaldson Company, Inc. website and any communication from a Donaldson recruiter would be sent using a donaldson.com email address. If you have any questions about the legitimacy of an employment opportunity, please reach out to talentacquisition@donaldson.com to verify that the communication is from Donaldson.
Our policy is to provide equal employment opportunities to all qualified persons without regard to race, gender, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity and/or expression, or other status protected by law.

Apply