ZipRecruiter

Log In

2

Entry Level Cyber Security Grc Jobs (NOW HIRING)

Hotman Group LLC

Entry Level GRC Analyst

Fort Worth, TX · On-site +1

About the Role Hotman Group is a boutique cybersecurity and GRC consulting firm doing meaningful ... What You Will Do As an Entry Level GRC Analyst at Hotman Group you will work side by side with ...

Hotman Group

Entry Level GRC Analyst

Fort Worth, TX · On-site +1

About the Role Hotman Group is a boutique cybersecurity and GRC consulting firm doing meaningful ... What You Will Do As an Entry Level GRC Analyst at Hotman Group you will work side by side with ...

KURV

Cybersecurity Program Analyst

Cleveland, OH · On-site

Familiarity with cloud environments (AWS preferred) * Entry-level certification (or willingness to ... Governance, Risk, and Compliance (GRC) career path Why This Role Matters This role strengthens the ...

Frazier & Deeter

Cyber Advisory Associate

Atlanta, GA · Hybrid

Internship, academic projects, or entry-level experience related to cybersecurity, IT audit, governance, risk, and compliance (GRC) preferred. * Interest in cybersecurity compliance frameworks and ...

All JobsCyber Security Grc JobsEntry Level Cyber Security Grc Jobs

Entry Level Cyber Security Grc information

See salary details

$40.5K

$122.9K

$180K

How much do entry level cyber security grc jobs pay per year?

As of Aug 19, 2026, the average yearly pay for entry level cyber security grc in the United States is $122,890.00, according to ZipRecruiter salary data. Most workers in this role earn between $102,000.00 and $142,000.00 per year, depending on experience, location, and employer.

What is an entry level Cyber Security GRC?

An Entry Level Cyber Security GRC (Governance, Risk, and Compliance) role involves helping organizations manage their information security policies, assess risks, and ensure compliance with regulatory standards. Individuals in this position assist with tasks such as monitoring security controls, conducting risk assessments, and documenting security procedures. This role is ideal for those new to cyber security, providing foundational experience in understanding how organizations protect their data and comply with legal requirements.

What are some typical projects or tasks an entry level Cyber Security GRC professional might work on during their first year?

As an Entry Level Cyber Security GRC (Governance, Risk, and Compliance) professional, you can expect to assist with tasks such as performing risk assessments, supporting compliance audits, and maintaining documentation for security policies and procedures. You may also help monitor regulatory changes, track remediation efforts, and collaborate with IT and business teams to ensure adherence to security standards. These experiences help you build a strong foundation in understanding risk management frameworks and the complexities of organizational compliance requirements.

What are the key skills and qualifications needed to thrive as an entry level Cyber Security GRC professional, and why are they important?

To thrive as an Entry Level Cyber Security GRC professional, you need a foundational understanding of information security principles, risk management frameworks, compliance standards, and a relevant degree or certification such as CompTIA Security+ or ISO 27001. Familiarity with GRC tools like RSA Archer, risk assessment methodologies, and security documentation platforms is typically required. Attention to detail, analytical thinking, and strong communication skills help you effectively interpret regulations and collaborate with various stakeholders. These skills and qualities are essential for ensuring organizations maintain compliance, manage risks, and protect sensitive data from cyber threats.

What is the difference between Entry Level Cyber Security Grc vs Entry Level Cyber Security Analyst?

AspectEntry Level Cyber Security GrcEntry Level Cyber Security Analyst
CertificationsCompTIA Security+, ISO 27001, CISSP (entry-level)CompTIA Security+, CEH, CISSP (entry-level)
Work EnvironmentPolicy, compliance, risk management teamsTechnical security monitoring, incident response
Employer & Industry UsageFinancial, healthcare, corporate sectors focusing on governanceIT departments, security operations centers (SOCs)

Entry Level Cyber Security Grc roles focus on governance, risk, and compliance activities, ensuring organizations adhere to security standards. In contrast, Entry Level Cyber Security Analyst roles are more technical, involving monitoring security systems and responding to threats. Both roles require similar certifications but differ in daily tasks and work environment, with Grc emphasizing policy and compliance, and Analyst roles focusing on technical security operations.

More about Entry Level Cyber Security Grc jobs

What cities are hiring for Entry Level Cyber Security Grc jobs?

Cities with the most Entry Level Cyber Security Grc job openings:

What are the most commonly searched types of Cyber Security Grc jobs?

The most popular types of Cyber Security Grc jobs are:

What states have the most Entry Level Cyber Security Grc jobs?

States with the most job openings for Entry Level Cyber Security Grc jobs include:

What job categories do people searching Entry Level Cyber Security Grc jobs look for?

The top searched job categories for Entry Level Cyber Security Grc jobs are:

Entry Level Cyber Security Grc jobs near you
Infographic showing various Entry Level Cyber Security Grc job openings in the United States as of August 2026, with employment types broken down into 87% Full Time, 11% Part Time, and 2% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $122,890 per year, or $59.1 per hour.

Entry Level GRC Analyst

Hotman Group LLC

Fort Worth, TX • On-site, Remote

Contractor

Re-posted 11 days ago

Job description

About the Role
Hotman Group is a boutique cybersecurity and GRC consulting firm doing meaningful work for clients who need GRC done right ranging from Fortune 1000 companies to high-growth startups. We are looking for a driven, detail-obsessed early-career professional who is ready to apply your professional foundation to real GRC consulting work and contribute to real client work from day one.
This is a full-time, remote, contract-to-hire position. Top performers move into permanent roles within 6 months.
What You Will Do
As an Entry Level GRC Analyst at Hotman Group you will work side by side with senior team members and partners to help our clients strengthen their cybersecurity and compliance programs. You will:
  • Assess and improve client security and IT controls
  • Develop policies, processes, and risk assessments aligned to top frameworks including NIST, ISO 27001, and SOC 2
  • Crosswalk and harmonize controls across multiple compliance frameworks
  • Document security requirements, support control implementation, and help track remediation progress
  • Build risk registers, support assessments, and monitor remediation progress
  • Work hands-on with GRC tools and contribute to solutions for complex client challenges
  • Translate technical and regulatory requirements into clear, actionable steps for our clients
  • Participate in peer review of deliverables before they go to clients - your work will be reviewed and you will review others

You will touch every aspect of cybersecurity and GRC work across multiple industries. Every engagement brings new challenges and new opportunities to grow.
What You Bring
  • A Bachelor's or Graduate degree in Cybersecurity, Information Systems, or a related field
  • 1 to 2 years of professional work experience -- this does not need to be in GRC or cybersecurity specifically, but it does need to be in a professional office or corporate environment. We are looking for candidates who have demonstrated reliability, communication, and accountability in a workplace setting
  • Solid understanding of fundamental security and IT concepts including access controls, data retention, and change management
  • Familiarity with major security and privacy frameworks including ISO, NIST, SOC 2, and HIPAA
  • Strong critical thinking, organization, and communication skills
  • Ability to balance multiple projects and deadlines with exceptional follow-through
  • Technical aptitude -- you are curious, you learn fast, and you do not shy away from new tools
  • A genuine interest in cybersecurity and a commitment to helping organizations build stronger, safer programs
  • A solutions-first attitude -- you show up with curiosity and energy and you are not afraid to dive into the work
  • The ability to think critically and execute with precision in a fast-paced, high-trust, low-ego environment
  • A high level of ownership and accountability -- you communicate proactively and follow through without being managed closely
  • A default toward communication - you keep the team informed, you acknowledge quickly, and you do not go dark on a deliverable or a client

Active pursuit of a relevant certification (Security+, CC, SSCP) is strongly preferred. If you are not currently studying for one, be prepared to explain why.
Requirements
  • Located in the USA with permanent work authorization (no sponsorship of any kind now or in the future)
  • Able to pass a background check
  • A private, dedicated workspace with a door - client calls and confidential work require it

Our Hiring Process
Our process is designed to be straightforward but thorough. In addition to a written questionnaire and video responses, finalists will complete a practical skills assessment before advancing to a panel interview with our delivery team. The assessment is designed to reflect real GRC work. If you are serious about building a career in this field, it is your opportunity to show us what you can do.
Why Hotman Group
At Hotman Group we are not just another consulting firm. You will work alongside people who care about the craft and push each other to do better. No politics, no silos, no hierarchy between you and the people making decisions.
You will touch more GRC frameworks, more industries, and more client situations in one year here than most practitioners see in five. You will grow because the work demands it.
The clients you serve will actually notice your work. You are not a number on a headcount. Your name is on the deliverable.
If you want to do real GRC work, get better at it every day, and work with a team that holds itself to a high standard - this is the place.
No phone calls or emails please.

Apply