ZipRecruiter

Log In

1

Director It Governance Risk Compliance Jobs in Silver Spring, MD

Kearney & Company, P.C.

IT Risk Consulting Manager

Washington, DC · On-site

$77 - $125/hr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

The Manager will support consulting engagements focused on IT risk, financial systems controls, cybersecurity governance, compliance, and remediation while also supporting internal IT audit and ...

Kearney & Company

IT Risk Consulting Manager

Washington, DC · On-site

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

The Manager will support consulting engagements focused on IT risk, financial systems controls, cybersecurity governance, compliance, and remediation while also supporting internal IT audit and ...

Seneca Holdings

SME IT Governance Manager

Chantilly, VA · On-site +1

$97K - $119K/yr

Direct all aspects of IT governance, including board charter development, strategic roadmap management, and oversight of compliance and risk mitigation initiatives. * Guide enterprise governance ...

Seneca Holdings

IT Governance Analyst

Chantilly, VA · Remote

... risk and maintaining compliance standards. Roles and Responsibilities include, but are not limited to : * Support the execution and documentation of IT governance processes, including preparing ...

Fathom Management LLC

IT PM Governance Specialist

Arlington, VA · On-site

$125K - $135K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Earned Value Management (EVM) * Risk Management * Experience supporting OMB and Federal ... Ensure compliance with OMB, Federal / Government Client, and agency investment management ...

Fathom Management LLC

IT PM Governance Specialist

Arlington, VA · Hybrid

$125K - $135K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Earned Value Management (EVM) * Risk Management * Experience supporting OMB and Federal ... Ensure compliance with OMB, Federal / Government Client, and agency investment management ...

next page

Showing results 1-20

All JobsIt Governance Risk Compliance JobsDirector It Governance Risk Compliance JobsDirector It Governance Risk Compliance Jobs in Silver Spring, MD

Director It Governance Risk Compliance information

See Silver Spring, MD salary details

$43.9K

$132.6K

$206.2K

How much do director it governance risk compliance jobs pay per year?

As of Aug 12, 2026, the average yearly pay for director it governance risk compliance in Silver Spring, MD is $132,630.00, according to ZipRecruiter salary data. Most workers in this role earn between $103,400.00 and $149,900.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a director of IT governance, risk, and compliance?

To thrive as a Director of IT Governance, Risk, and Compliance, you need deep expertise in risk management, regulatory frameworks (such as SOX, GDPR, or HIPAA), and IT governance principles, typically supported by a bachelor's or master's degree in information security or a related field. Familiarity with GRC platforms (like RSA Archer or ServiceNow), cybersecurity tools, and certifications such as CISA, CISM, or CISSP is highly valued. Outstanding leadership, strategic thinking, and communication skills are essential for collaborating with stakeholders and leading cross-functional initiatives. These competencies are crucial to ensure organizational compliance, minimize risk exposure, and align IT strategies with business objectives.

What does a director of IT governance, risk, and compliance do?

A Director of IT Governance, Risk, and Compliance (GRC) is responsible for overseeing an organization's IT policies, risk management strategies, and compliance with internal and external regulations. They ensure that the company's information systems are secure, compliant with relevant laws and standards, and aligned with business objectives. Their duties include developing frameworks for IT governance, managing risk assessments, and coordinating audits. They also lead teams to implement best practices and mitigate potential threats to information security.

What are the most common challenges faced by a director of IT governance, risk, and compliance when aligning IT policies with business goals?

A Director of IT Governance, Risk, and Compliance often faces challenges in ensuring IT policies and procedures are not only regulatory-compliant but also flexible enough to support the company's strategic business objectives. Balancing risk mitigation with the need for technological innovation can be complex, especially when different departments have varying priorities. Building strong cross-functional relationships and maintaining clear communication with business leaders are key to successfully aligning IT governance frameworks with organizational goals. Additionally, staying updated with rapidly evolving regulations and emerging threats requires continuous learning and adaptation.

What is the difference between Director It Governance Risk Compliance vs IT Risk Manager?

AspectDirector It Governance Risk ComplianceIT Risk Manager
CertificationsCISA, CISSP, CRISCCISA, CISSP, CRISC
Work EnvironmentStrategic, leadership-focused, cross-departmentalOperational, technical, risk assessment tasks
Employer & Industry UsageFinancial, healthcare, large enterprisesFinancial, tech, consulting firms

The main difference is that the Director It Governance Risk Compliance oversees overall governance strategies and compliance at a senior level, while the IT Risk Manager focuses on identifying and mitigating specific IT risks. Both roles require similar certifications and work in related environments, but the director has broader strategic responsibilities.

What are popular job titles related to Director It Governance Risk Compliance jobs in Silver Spring, MD? For Director It Governance Risk Compliance jobs in Silver Spring, MD, the most frequently searched job titles are:
What job categories do people searching Director It Governance Risk Compliance jobs in Silver Spring, MD look for? The top searched job categories for Director It Governance Risk Compliance jobs in Silver Spring, MD are:
What cities near Silver Spring, MD are hiring for Director It Governance Risk Compliance jobs? Cities near Silver Spring, MD with the most Director It Governance Risk Compliance job openings:
Director It Governance Risk Compliance jobs near you
Infographic showing various Director It Governance Risk Compliance job openings in Silver Spring, MD as of August 2026, with employment types broken down into 1% As Needed, 80% Full Time, 15% Part Time, and 4% Contract. Highlights an 92% Physical, 4% Hybrid, and 4% Remote job distribution, with an average salary of $132,630 per year, or $63.8 per hour.

Senior Consultant - IT Governance, Risk & Compliance (GRC)

Infinitive Inc

Ashburn, VA • On-site

$90K - $139K/yr

Full-time

Re-posted 3 days ago

Job description

Senior Consultant - IT Governance, Risk & Compliance (GRC)
ABOUT INFINITIVE
Infinitive is a data and AI consultancy that enables its clients to modernize and operationalize their data to create lasting and substantial value. We bring deep industry and technology expertise to drive and sustain adoption of new capabilities, matching our people and personalities to our clients' culture while delivering the right mix of talent and skills to enable measurable value.
Infinitive has been named Best Small Firms to Work For by Consulting Magazine 8 times, most recently in 2025, and has also been recognized as a Washington Post Top Workplace, Washington Business Journal Best Places to Work, and Virginia Business Best Places to Work.
POSITION OVERVIEW
The Senior Consultant - IT GRC is a key contributing team member within Infinitive's Transformation Practice. In this role, you will apply your expertise in IT governance, risk management, and compliance to drive successful client engagements from initiation through delivery. You will serve as a primary liaison between client stakeholders and internal teams, translating complex regulatory and risk requirements into actionable frameworks and project plans while ensuring delivery quality, schedule adherence, and measurable client value.
ROLES & RESPONSIBILITIES
GRC Program Delivery
  • Lead or co-lead the design, implementation, and assessment of IT GRC programs including risk management frameworks, control libraries, and compliance roadmaps
  • Conduct risk assessments, control gap analyses, and maturity evaluations aligned to industry frameworks (NIST CSF, ISO 27001, SOC 2, COBIT, CMMC, FedRAMP)
  • Develop and maintain GRC deliverables including policies, standards, control matrices, risk registers, and audit evidence packages
  • Support clients in remediating audit findings and implementing sustainable controls to reduce residual risk
  • Track project progress against milestones, flag risks to leadership, and take ownership of assigned components with accountability for on-time, high-quality delivery
  • Maintain 90%+ billability in support of Infinitive's organizational strategy and personal bonus eligibility
Compliance & Regulatory Analysis
  • Perform regulatory and compliance gap assessments across frameworks such as HIPAA, PCI-DSS, SOX, GDPR, CCPA, FISMA, and sector-specific requirements
  • Act as primary author of-or provide substantial input to-client-facing deliverables including compliance roadmaps, risk treatment plans, audit readiness reports, and remediation trackers
  • Map overlapping control requirements across multiple frameworks to streamline compliance efforts and reduce duplication
  • Use data to understand the scope of client risk exposures, generate insights, and develop recommended solutions in collaboration with project leadership

IT Risk Management
  • Facilitate risk identification and prioritization workshops with client stakeholders across IT, security, legal, and business functions
  • Develop and maintain risk registers, risk heat maps, and third-party/vendor risk assessment programs
  • Support the integration of GRC tooling (e.g., ServiceNow GRC, Archer, OneTrust, Vanta) to automate risk and compliance workflows
  • Demonstrate a clear understanding of project goals and client ROI; proactively surface potential needs, pain points, and risk exposures to leadership
Client Relationship Management
  • Maintain professional, responsive, and constructive client relationships with the goal of becoming a trusted GRC advisor
  • Present findings and deliverables to client stakeholders including CISOs, CIOs, compliance officers, and audit committees
  • Communicate clearly and with discretion across internal and external audiences, including senior executive and regulatory stakeholders
  • Identify new opportunities through client interactions and raise them to Infinitive leadership to support sales activities
Team & Organizational Contribution
  • Collaborate cross-functionally with Infinitive and client teams including cybersecurity, data, and cloud engineering practices
  • Actively learn adjacent skill sets and engage with fellow team members to build broad consulting capabilities
  • Participate actively in Infinitive's cultural events, career development initiatives, and recruiting efforts
  • Support sales and marketing activities as schedule allows, including communicating Infinitive's GRC capabilities and differentiators
  • Maintain flexibility when navigating change; take initiative to expand your skill set while keeping leadership informed

COMPETENCIES & SKILLS
  • Knowledge of IT GRC frameworks including NIST CSF, NIST 800-53, ISO 27001/27002, SOC 2, COBIT, CMMC, and FedRAMP
  • Hands-on experience conducting control assessments, risk assessments, and audit readiness activities
  • Proficiency with GRC platforms and tooling such as ServiceNow GRC, Archer RSA, OneTrust, Vanta, or equivalent
  • Business analysis skills including requirements gathering, process mapping, gap analysis, and stakeholder facilitation - applied to GRC program design and implementation
  • Project management methodologies, with experience managing compliance and risk remediation initiatives in Agile and waterfall environments
  • Strong interpersonal and communication skills; ability to engage effectively with both technical teams and executive client leadership
  • Familiarity with cloud security and compliance postures across AWS, Microsoft Azure, and/or Google Cloud Platform (e.g., shared responsibility model, cloud-native security controls)

Infinitive is required by law in some jurisdictions to include a reasonable estimate of the compensation range for this role. The determination of this range includes various factors not limited to skill set, level, experience, relevant training, and licensure and certifications. Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $90,000.00 - $139,000.00.
Infinitive is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.

Apply