ZipRecruiter

Log In

2

Full Time Cyber Security Grc Jobs (NOW HIRING)

KēSTA I.T.

Cybersecurity Engineer

Draper, UT

$90K - $114K/yr

A Cybersecurity / GRC Engineer supports the execution and continuous improvement of an organization ... on a full time and consulting basis. If you're interested in a role where top performance is ...

OSC Global

Cyber Security Intern (GRC)

Richland, WA · On-site

$21 - $32.50/hr

... join our cybersecurity team supporting the Department of Energy Hanford Site in Richland ... This is a full-time internship (30-40 hours per week) and is expected to continue until the ...

OSC Global

Cyber Security Intern (GRC)

Anchorage, AK · On-site

$21 - $32.50/hr

... join our cybersecurity team supporting the Department of Energy Hanford Site in Richland ... This is a full-time remote internship (30-40 hours per week) based in Richland, WA, with optional ...

VISTRADA

Cybersecurity Analyst

Manhattan, NY · Remote

Participate in the on-boarding of clients into GRC tools like Apptega. * Provide training and ... Job Type: Full-time; Work mostly from home and occasionally at client sites. Benefits: Medical ...

next page

Showing results 1-20

All JobsCyber Security Grc JobsFull Time Cyber Security Grc Jobs

Full Time Cyber Security Grc information

See salary details

$40.5K

$122.9K

$180K

How much do full time cyber security grc jobs pay per year?

As of Jul 20, 2026, the average yearly pay for full time cyber security grc in the United States is $122,890.00, according to ZipRecruiter salary data. Most workers in this role earn between $102,000.00 and $142,000.00 per year, depending on experience, location, and employer.

What are the typical challenges faced by professionals in a full-time Cyber Security GRC role, and how can they be addressed?

Professionals in full-time Cyber Security GRC (Governance, Risk, and Compliance) roles often face the challenge of keeping up with constantly evolving regulatory requirements and cyber threats. Balancing the needs of compliance with practical risk management can be complex, especially when collaborating with technical teams and business stakeholders. To address these challenges, strong communication skills, continuous learning, and staying updated with industry frameworks are essential. Many organizations support this by encouraging cross-departmental collaboration and providing opportunities for professional development.

What is the difference between Full Time Cyber Security Grc vs Cyber Security Analyst?

AspectFull Time Cyber Security GrcCyber Security Analyst
CertificationsISO 27001, CISSP, CISACompTIA Security+, CISSP, CEH
Work EnvironmentPolicy development, compliance, risk managementThreat detection, incident response, system monitoring
Employer & Industry UsageOrganizations focusing on governance and complianceOrganizations focusing on security operations and analysis

Full Time Cyber Security Grc roles primarily focus on governance, risk management, and compliance activities, requiring certifications like ISO 27001 and CISA. Cyber Security Analysts concentrate on monitoring security threats and responding to incidents, often holding certifications like Security+ or CEH. While Grc roles emphasize policy and compliance, Analysts are more involved in technical threat detection. Both roles are essential in a comprehensive cybersecurity strategy but differ in daily tasks and focus areas.

What are Full Time Cyber Security GRC professionals?

Full Time Cyber Security GRC (Governance, Risk, and Compliance) professionals are experts who help organizations identify, assess, and manage cybersecurity risks in alignment with regulatory requirements and internal policies. They develop and implement frameworks, policies, and procedures to ensure the organization's digital information is protected and compliant with laws and standards. Their work often includes conducting risk assessments, monitoring compliance, and advising on best practices to mitigate cybersecurity threats. These professionals play a crucial role in maintaining an organization's security posture and ensuring data integrity across all systems.

What are the key skills and qualifications needed to thrive as a Full Time Cyber Security GRC professional, and why are they important?

To thrive as a Full Time Cyber Security GRC (Governance, Risk, and Compliance) professional, you need a solid understanding of information security principles, risk management frameworks, and regulatory requirements, often demonstrated by a relevant degree and certifications like CISSP or CISA. Familiarity with tools such as GRC platforms (e.g., RSA Archer), risk assessment software, and compliance management systems is typical for this role. Strong analytical thinking, attention to detail, effective communication, and stakeholder management set exceptional professionals apart. These skills ensure that organizations can identify risks, maintain compliance, and build robust security postures in an evolving threat landscape.
More about Full Time Cyber Security Grc jobs
What cities are hiring for Full Time Cyber Security Grc jobs? Cities with the most Full Time Cyber Security Grc job openings:
What are the most commonly searched types of Cyber Security Grc jobs? The most popular types of Cyber Security Grc jobs are:
What states have the most Full Time Cyber Security Grc jobs? States with the most job openings for Full Time Cyber Security Grc jobs include:
What job categories do people searching Full Time Cyber Security Grc jobs look for? The top searched job categories for Full Time Cyber Security Grc jobs are:
Full Time Cyber Security Grc jobs near you
Infographic showing various Full Time Cyber Security Grc job openings in the United States as of July 2026, with employment types broken down into 2% Locum Tenens, 1% Internship, 93% Full Time, 2% Part Time, and 2% Contract. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution, with an average salary of $122,890 per year, or $59.1 per hour.
Cybersecurity GRC Analyst

Cybersecurity GRC Analyst

Western National Insurance Group

Edina, MN • On-site

$66K - $114K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 16 days ago

Job description

Job Type
Full-time
Description
Who are we?
Western National Insurance Group is a private mutual insurance company with over 120 years of experience serving customers' property-and-casualty insurance needs in the Midwestern, Northwestern, and Southwestern United States. Known as "The Relationship Company®," we define success as a measure of the relationships we've built over time. In everything that we do, we know that delivering a friendly and helpful interaction makes for a better experience for everyone involved. That's the power of "nice". At Western National, nice is something we work to bring to every person and organization with whom we partner and serve.
Does this opportunity interest you?
Western National is seeking a Cybersecurity GRC Analyst to join our team!
The individual in this role will have the opportunity to strengthen the organization's information security program by supporting regulatory compliance, managing third-party security risk, advancing security framework maturity, leading security awareness initiatives, and delivering meaningful security metrics that enable informed business decisions.
What are the responsibilities and opportunities of this role?
  • Supports insurance-related regulatory compliance by maintaining audit-ready documentation and coordinating timely and accurate regulatory filings across multiple states.
  • Partners with vendor management, legal, and business stakeholders to integrate security requirements throughout the vendor lifecycle.
  • Performs security risk assessments of third-party vendors and service providers and tracks remediation activities.
  • Maintains the vendor risk register and monitors progress toward risk mitigation objectives.
  • Serves as the Information Security Team's primary point of contact for state insurance departments, auditors, and compliance-related inquiries.
  • Designs, coordinates, and executes the organization's security awareness training program.
  • Develops targeted awareness campaigns focused on phishing, social engineering, and secure behaviors across the organization.
  • Creates and distributes security awareness communications, including newsletters, alerts, and announcements.
  • Tracks training participation, measures program effectiveness, and recommends continuous improvements.
  • Maps existing security controls to recognized frameworks, such as NIST Cybersecurity Framework (CSF), CIS Controls, and NYDFS requirements.
  • Conducts security framework gap assessments and develops recommendations to improve organizational maturity.
  • Supports evidence collection for internal audits, regulatory reviews, and annual maturity assessments.
  • Defines, tracks, and reports key risk indicators (KRIs) and key performance indicators (KPIs) for the information security program.
  • Develops dashboards and reports that provide leadership visibility into security compliance, awareness, incident response, and program performance.
  • Assists information security leadership with executive reporting and board presentation materials.
  • Exercises sound judgment when identifying compliance gaps, prioritizing work, and escalating security risks.
  • Recommends process improvements that strengthen governance, documentation, compliance activities, and security awareness efforts.
  • Consistently acts according to our customer experience standards, including responding quickly, maintaining a positive attitude, building rapport, demonstrating empathy, managing the customer's expectations, using the proper communication channel for the situation, and taking ownership to ensure the customer's issue is resolved.
  • Performs special projects and other duties as assigned.

Requirements
What are the must-have qualifications for a candidate?
  • Two-plus years of experience in governance, risk, and compliance (GRC); compliance; cybersecurity; or security awareness roles.
  • Strong understanding of security and regulatory frameworks, such as NIST CSF, CIS Controls, COBIT, and similar standards.
  • Experience supporting regulatory audits, evidence collection, or third-party compliance assessments.
  • Experience conducting vendor security risk assessments and documenting remediation activities.
  • Strong understanding of governance, risk, and compliance concepts.
  • Excellent organizational, written, verbal, and interpersonal communication skills.
  • Proficient use of Microsoft Office applications, including Excel, PowerPoint, and Word.
  • Ability to analyze information, identify trends, and communicate recommendations effectively.
  • Bachelor's degree in communications, business, or a related field or equivalent relevant experience.

What will our ideal candidate have?
  • Experience using governance, risk, and compliance platforms, such as Drata, Vanta, OneTrust, or Archer.
  • Knowledge of state insurance regulations and compliance reporting requirements.
  • Experience developing or leading security awareness and phishing simulation programs.
  • Experience supporting vendor management or third-party security review processes.
  • Experience developing executive dashboards and security performance reporting.
  • Professional certifications, such as CompTIA Security+, CISA, CRISC, or other governance, risk, and compliance-related credentials.
  • Experience within the insurance, financial services, or healthcare industry.

Compensation overview
The targeted hiring range for this role is $66,300 - $114,290 annually. However, the base pay offered may vary depending on the job-related knowledge, skills, credentials, and experience of each candidate as well as other factors such as the scope and location of the role. Candidates looking for compensation outside of the posted range are encouraged to apply and will be considered based on their individual qualifications and/or may be considered for other positions.
Culture and Total Rewards
Western National has long been known as "The Relationship Company®" and caring for our employees is part of that relationship commitment. We value connectiveness, empowerment, and accountability, and we believe that our employees are our biggest asset.
Currently ranked as the 41st largest private company by revenue in Minnesota (Minneapolis/St. Paul Business Journal), Western National has earned accolades year-over-year as an employer of choice and garnered multiple awards for wellness in the workplace. Western National has also been named a Top Workplace by the Star Tribune for consecutive years. In addition, the Group is consistently recognized as a Ward's 50 property-and-casualty insurance company for its outstanding financial results.
Western National offers full-time employees a significant Total Rewards Package, including:
  • Medical insurance plan options and other standard employee benefits, including dental insurance, vision benefits, life insurance, disability insurance, and more!
  • Health Savings Accounts (HSA) and Flexible Spending Accounts (FSA)
  • 401(k) Plan (participants are eligible for 100% matching on the first 6% of their contributions)
  • Wellbeing Program, including onsite fitness studio
  • Paid Time Off - including holiday, vacation, and volunteer
  • 100% company-paid tuition reimbursement for approved job-relevant coursework and access to The Institutes (Risk and insurance education)
  • Paid parental leave
  • Bonus opportunities

Western National believes in supporting balance between work and life by providing a flexible work environment, which includes a variety of hybrid and remote work arrangements designed to balance individual, job, department, and company needs.
Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.
Western National provides employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.
Salary Description
$66,300 - $114,290

Apply