ZipRecruiter

Log In

2

Full Time It Grc Jobs (NOW HIRING)

Figma

Manager, Security Operations

San Francisco, CA · On-site +1

... IT, GRC, and Legal to strengthen our detection and response capabilities, improve operational resilience, and help shape the future of our DART and SOC functions. This is a full time role that can be ...

Oscar Health

Senior Security Engineer I, GRC

New York, NY · Hybrid

$163K - $215K/yr

It means that we cultivate an environment where people can be their most authentic selves and find ... Full-time employees are eligible for benefits including: medical, dental, and vision benefits, 11 ...

Oscar Health

Senior Security Engineer I, GRC

New York, NY · On-site

$163K - $215K/yr

It means that we cultivate an environment where people can be their most authentic selves and find ... Full-time employees are eligible for benefits including: medical, dental, and vision benefits, 11 ...

Culligan

Senior Manager of IT Compliance

Rosemont, IL · On-site

$145K - $175K/yr

... compliance (IT GRC) framework to support ongoing regulatory requirements. This position will ... Full-time positions are eligible for competitive benefits, including paid time off, health, dental ...

Culligan

Senior Manager of IT Compliance

Rosemont, IL

$145K - $175K/yr

... compliance (IT GRC) framework to support ongoing regulatory requirements. This position will ... Full-time positions are eligible for competitive benefits, including paid time off, health, dental ...

Whoop

Senior GRC Analyst

Boston, MA · On-site

$130K - $170K/yr

Collaborate with Security Engineering, Product Security, Legal, IT, and business teams to evaluate ... S. base salary range for this full-time position is $130,000 - $170,000. Salary ranges are ...

E*Pro, Inc.

Senior GRC Consultant

New York, NY · On-site

Pro Consulting service offerings include contingent Staff Augmentation of IT professionals ... Permanent / Full Time Description: * At least 8+ years of Governance, Risk and Compliance ...

Momentum

GRC Analyst

Dallas, TX · On-site

Join us in this full-time role, based in our Dallas Office at the Link: 2601 Olive Street, Dallas ... portfolio company IT teams to assess and close control gaps. * Build and maintain a unified ...

Implify Inc

RSA Archer - GRC -PCON

Torrance, CA

Since it's inception, Implify, Inc has been providing best-quality and cost-effective IT solutions ... Torrance, CA. Full Time Permanent Qualifications Basic Bachelor's degree or foreign equivalent ...

previous pagenext page

Showing results 21-40

All JobsIt Grc JobsFull Time It Grc Jobs

Full Time It Grc information

Is IT hard to get a full time IT GRC job?

Securing a full-time IT GRC (Governance, Risk, and Compliance) role can be competitive, often requiring relevant certifications such as CISSP or CISA, along with experience in risk management, compliance frameworks, and security policies. Strong analytical skills and knowledge of regulatory standards like GDPR or HIPAA improve job prospects, but the difficulty varies based on individual qualifications and market demand.

What is the difference between Full Time It Grc vs Full Time Cybersecurity Analyst?

AspectFull Time It GrcFull Time Cybersecurity Analyst
CertificationsISO 27001, CISSP, CISACISSP, CEH, CompTIA Security+
Work EnvironmentPolicy development, compliance, risk managementThreat detection, incident response, vulnerability assessment
Industry UsageGovernance, risk, and compliance departmentsSecurity operations centers, IT security teams

Full Time It Grc focuses on establishing policies, ensuring compliance, and managing risks within an organization. In contrast, Full Time Cybersecurity Analysts primarily monitor security threats, respond to incidents, and analyze vulnerabilities. Both roles require certifications like CISSP but differ in daily tasks and focus areas, with It Grc emphasizing governance and cybersecurity analysts concentrating on threat mitigation.

Is full time IT GRC a good career?

Full-time IT GRC (Governance, Risk, and Compliance) roles are in demand due to increasing cybersecurity regulations and organizational needs for risk management. These positions often require knowledge of compliance frameworks, security policies, and tools like GRC software, offering stable employment and growth opportunities in the cybersecurity field.
More about Full Time It Grc jobs
What are the most commonly searched types of It Grc jobs? The most popular types of It Grc jobs are:
What job categories do people searching Full Time It Grc jobs look for? The top searched job categories for Full Time It Grc jobs are:
Full Time It Grc jobs near you
Infographic showing various Full Time It Grc job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 89% Full Time, 1% Part Time, and 9% Contract. Highlights an 76% Physical, 7% Hybrid, and 17% Remote job distribution.

Director GRC & Security Architecture

University of Delaware

Newark, DE • On-site

Full-time

Re-posted 14 days ago

University Of Delaware rating

5.7

Company rating: 5.7 out of 10

Based on 21 frontline employees who took The Breakroom Quiz

577th of 616 rated colleges and universities

Job description

Director GRC & Security Architecture
Job no: 502862
College / VP Area: Vice President for IT
Work type: Staff
Location: Newark, DE
Categories: Information Technology, Legal & Compliance, Full Time
Pay Grade: 33S
Context of Job:
The Director of GRC and Security Architecture is a senior leadership role responsible for governing the organization's information security risk, compliance, and architectural security posture. This role provides enterprise-wide leadership across governance, risk management, regulatory compliance (including HIPAA), and security architecture to ensure security controls are designed, implemented, and operating effectively in support of business, academic, and clinical objectives.
Serving as the designated HIPAA Security Officer, this role partners closely with Legal, Privacy, Compliance, IT, Cloud, Application, and Security Operations teams to ensure regulatory readiness, risk-informed decision-making, and secure-by-design technology architecture across on-premises, cloud, and SaaS environments.
This position reports to the Chief Information Security Officer of the University.
Major Responsibilities:
Governance, Risk & Compliance (GRC)
  • Lead the enterprise Information Security Governance, Risk, and Compliance (GRC) program.
  • Establish and maintain security policies, standards, procedures, and control frameworks aligned with NIST, HITRUST, ISO 27001, and other applicable frameworks.
  • Oversee enterprise risk assessments, third-party risk management, and control effectiveness evaluations.
  • Translate regulatory, legal, and contractual requirements into actionable security controls and architectural standards.
  • Ensure ongoing compliance with applicable regulations and standards, including HIPAA, PCI DSS, FERPA, SOC 2, and FIPS-140, as applicable

HIPAA Security Officer Responsibilities
  • Serve as the organization's designated HIPAA Security Officer.
  • Oversee administrative, technical, and physical safeguards required under the HIPAA Security Rule.
  • Partner with Privacy, Legal, Compliance, and Health IT leadership on risk analyses, remediation plans, and regulatory inquiries.
  • Support audits, investigations, and compliance reviews related to protected health information (PHI).
  • Ensure appropriate security awareness and HIPAA training programs are developed and delivered across the organization.
    Security Architecture & Secure Design
  • Own and lead the security architecture function, defining enterprise security architecture principles, reference architectures, and design standards.
  • Review and approve security architecture for new systems, applications, cloud services, and major technology initiatives.
  • Ensure security is embedded early in system lifecycle activities through secure-by-design and defense-in-depth principles.
  • Partner with infrastructure, cloud, application, and DevOps teams to integrate security requirements into platforms and solutions.
  • Guide architectural decisions related to identity, network segmentation, encryption, key management, logging, and data protection.

Strategic Planning & Program Leadership
  • Contribute to and lead multi-year security strategy and roadmap development in alignment with organizational objectives.
  • Actively participate in enterprise security and risk governance forums, advising executive leadership on risk posture and architectural trade-offs.
  • Balance risk reduction with operational efficiency, usability, and institutional mission requirements.
  • Serve as a trusted advisor to schools, departments, and business units on risk and architectural security decisions.

Oversight of Security Technologies & Controls
  • Provide governance and oversight for security technologies supporting risk management, compliance, and architectural controls.
  • Ensure alignment between security architecture standards and operational security tooling.
  • Evaluate new security technologies and frameworks to address evolving regulatory and threat landscapes.

Metrics, Reporting & Communication
  • Develop and report meaningful risk and compliance metrics to senior leadership and governance committees.
  • Communicate complex security and compliance topics clearly to technical and non-technical stakeholders.
  • Provide executive-level reporting on risk trends, compliance posture, and architectural maturity.

Leadership & Talent Development
  • Lead and develop GRC and security architecture professionals.
  • Establish clear role definitions, performance expectations, and professional development pathways.
  • Foster a culture of accountability, continuous improvement, and collaboration across security and IT teams.

Budget, Vendor & Resource Management
  • Manage budgets associated with GRC, compliance, and security architecture programs.
  • Oversee vendor relationships related to risk management, compliance tooling, and architectural services.
  • Ensure responsible financial stewardship and alignment with strategic priorities.

Qualifications:
  • Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field (Master's preferred).
  • Seven years of progressive experience in information security, risk management, or IT, including leadership roles.
  • Demonstrated experience leading GRC programs, regulatory compliance efforts, and enterprise risk management.
  • Strong knowledge of HIPAA Security Rule, PCI DSS, and related regulatory frameworks.
  • Proven experience defining and governing security architecture across enterprise and cloud environments.
  • Excellent written and verbal communication skills, including executive-level presentations.
  • Experience supporting healthcare, higher education, or regulated enterprise environments preferred.
  • Hands-on experience with NIST, HITRUST CSF, ISO 27001, SOC 2, and third-party risk frameworks preferred.
  • Professional certifications such as CISSP, CISM, CRISC, or equivalent preferred.
  • Experience partnering closely with SOC, IR, Privacy, and Legal teams preferred.
  • Demonstrated success leading organizational change and maturing security governance programs preferred.

Notice of Non-Discrimination and Equal Opportunity
The University of Delaware does not discriminate against any person on the basis of race, color, national origin, sex, gender identity or expression, sexual orientation, genetic information, marital status, disability, religion, age, veteran status or any other characteristic protected by applicable law in its employment, educational programs and activities, admissions policies, and scholarship and loan programs as required by Title IX of the Educational Amendments of 1972, the Americans with Disabilities Act of 1990, Section 504 of the Rehabilitation Act of 1973, Title VI and VII of the Civil Rights Act of 1964, and other applicable statutes and University policies. The University of Delaware also prohibits unlawful harassment including sexual harassment and sexual violence.
Applications close:
Whatsapp Facebook LinkedIn Email App

What University Of Delaware employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply