1

Governance Risk And Compliance Analyst Jobs (NOW HIRING)

IT COMPLIANCE ANALYST

$96K - $96K/yr

... governance, risk, and compliance function within the organization. Position Overview The ... IT Compliance Analyst is to assist in the development, implementation and operations of the ...

next page

Showing results 1-20

Governance Risk And Compliance Analyst information

See salary details

$15

$40

$65

How much do governance risk and compliance analyst jobs pay per hour?

As of Jul 6, 2026, the average hourly pay for governance risk and compliance analyst in the United States is $40.49, according to ZipRecruiter salary data. Most workers in this role earn between $29.81 and $49.28 per hour, depending on experience, location, and employer.

What is the difference between Governance Risk And Compliance Analyst vs Compliance Analyst?

AspectGovernance Risk And Compliance AnalystCompliance Analyst
CertificationsISO 31000, CRISC, CISAISO 37001, CCEP, CCEP
Work EnvironmentCorporate, financial, or regulatory sectorsHealthcare, finance, manufacturing
Employer & Industry UsageUsed in organizations with complex risk management needsUsed in organizations ensuring regulatory compliance

The Governance Risk And Compliance Analyst focuses on managing overall governance frameworks, assessing risks, and ensuring compliance with policies and regulations. In contrast, the Compliance Analyst primarily concentrates on adhering to specific laws and standards. While both roles require understanding of regulations and certifications, the Governance Risk And Compliance Analyst has a broader scope involving risk management and governance strategies.

What is a Governance, Risk, and Compliance (GRC) Analyst?

A Governance, Risk, and Compliance (GRC) Analyst is a professional responsible for helping organizations manage risks, ensure compliance with laws and regulations, and implement governance frameworks. They assess internal processes, identify potential risks, and recommend strategies to mitigate those risks. GRC Analysts also develop and monitor policies to ensure that business operations align with regulatory requirements and industry standards. Their work is essential in protecting an organization from financial, legal, and reputational harm.

What are the key skills and qualifications needed to thrive as a Governance Risk and Compliance Analyst, and why are they important?

To thrive as a Governance Risk and Compliance (GRC) Analyst, you need a solid understanding of risk management frameworks, regulatory requirements, and compliance standards, often supported by a degree in information security, business, or a related field. Familiarity with GRC software platforms, risk assessment tools, and certifications such as CISA or CRISC is typically required. Exceptional analytical skills, attention to detail, and strong communication abilities help you effectively interpret regulations and collaborate across departments. These competencies ensure that organizations can identify risks, maintain compliance, and build a strong foundation for operational resilience.

How do Governance Risk and Compliance (GRC) Analysts typically collaborate with other departments within an organization?

GRC Analysts work closely with various departments such as IT, legal, finance, and operations to ensure that organizational policies and procedures align with regulatory requirements and internal controls. They often facilitate cross-functional meetings to assess risks, discuss compliance gaps, and implement corrective measures. Effective communication and coordination are key, as GRC Analysts must translate complex regulations into actionable steps for different teams, ensuring a unified approach to risk management and compliance throughout the organization.
More about Governance Risk And Compliance Analyst jobs
What cities are hiring for Governance Risk And Compliance Analyst jobs? Cities with the most Governance Risk And Compliance Analyst job openings:
What states have the most Governance Risk And Compliance Analyst jobs? States with the most job openings for Governance Risk And Compliance Analyst jobs include:
Infographic showing various Governance Risk And Compliance Analyst job openings in the United States as of June 2026, with employment types broken down into 4% Internship, 52% Full Time, 4% Part Time, 4% Temporary, and 36% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $84,210 per year, or $40.5 per hour.
Governance, Risk and Compliance Analyst II

Governance, Risk and Compliance Analyst II

StubHub

New York, NY • Hybrid

Other

Medical, Dental, Vision, Retirement

Posted 3 days ago


StubHub rating

7.2

Company rating: 7.2 out of 10

Based on 6 frontline employees who took The Breakroom Quiz

1st of 3 rated ticket sellers


Job description

StubHub is seeking for a dynamic Government, Risk, Compliance Analyst II to join the team. The GRC Analyst will measure risk in a way that informs and prioritizes action. You will use metrics to train the rest of the organization in ways that prevents the creation of risks that fall outside StubHub's tolerance levels

As part of the IT Security team, the GRC team is dedicated to making informed decisions based on risk levels, to minimize risks, to develop a control framework that keeps risk within tolerable levels, and to remain compliant with key privacy regulations. The team also aids Legal, HR, and Fraud teams with any e-discovery needs while ensuring our risk technology framework adheres to StubHub's risk appetite and adapts to the ever-changing dynamic environment we live in. 

Location: Hybrid (3 days in office/2 days remote) - New York, NY
 
What You'll Do
  • Oversee and manage the vendor risk management program by performing risk assessments of third parties to ensure they are compliant with StubHub's regulations and requirements and by optimizing the intake and renewal process, along with performing vendor risk categorization and evaluations 
  • Monitor and manage the IT Security risk register to ensure that all IT Security risks are accurately represented and actively managed 
  • Perform evidence collection and quality assurance of IT and Security controls 
  • Manage the GRC request queue to assist other teams with any GRC related queries or requests 
  • Build and manage user awareness training campaigns 
  • Assist Legal with contract reviews for technology vendors 
  • Conduct e-discovery searches as required by StubHub's Legal, HR, or Fraud teams in Purview, Google Vault, or Slack 
  • Collaborate with teams across StubHub to help execute the Information Security and Governance, Risk & Compliance strategy, extending processes as necessary to help business partners identify information security risks and manage risks to acceptable levels 
  • Document all risks and controls identified during third party assessments and audits 
  • Ensure PCI compliance by overseeing PCI scans and working with other teams or the PCI ASV vendor to remediate issues and by working with our QSA during our annual recertification process 
  • Contribute to our SOX Program by owning the User Recertification process for in-scope applications, user groups, and systems as well as by providing Control Evidence 
  • Perform continuous checks and reviews on access management to ensure risks are mitigated 
  • Proactively provide relevant inputs to the global risk framework based on the latest government and industry information regarding new threats and vulnerabilities and communicate relevant information to appropriate teams, soliciting action plans if needed 
  • In addition to these responsibilities, you will be part of a dynamic team that adapts its processes and services to ensure it is maximizing its contribution to StubHub's ongoing success. 
What You've Done
  • 2+ years of experience in Information Security Governance, Risk and Compliance 
  • Prior experience performing SOC 2 reviews 
  • Prior experience with SOX compliance processes and being a part of a SOX program 
  • Experience using the MS or Google productivity suite 
  • Experience leveraging AI to increase productivity and efficiency 
  • Prior experience conducting or being part of IT Audits 
  • Understanding of fulfilling audit documentation requests 
  • Prior experience fulfilling e-discovery requests 
  • Prior experience with Microsoft's Purview Compliance Portal and its toolset a plus 
  • Effective analytical, negotiation, facilitation, interpersonal, and stakeholder management skills 
  • Strong verbal and written communication 
  • Strong attention to detail 
  • Experience creating and updating company policies, procedures, and standards 
  • Experience with the NIST CSF, SOX security frameworks and PCI DSS standards 
  • Prior operational experience in applying risk frameworks to technologies (including cloud and on-prem) and continuous processes (including DevOps) very helpful 
  • Familiarity with change management processes 
  • Superb problem-solving skills 
  • Ability to clearly report on the risk posture of the organization 

What We Offer

  • Accelerated Growth Environment: Immerse yourself in an environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale.
  • Top Tier Compensation Package: Enjoy a rewarding compensation package that includes enticing stock incentives, aligning with our commitment to recognizing and valuing your contributions.
  • Flexible Time Off: Embrace a healthy work-life balance with unlimited Flex Time Off, providing you the flexibility to manage your schedule and recharge as needed.
  • Comprehensive Benefits Package: Prioritize your well-being with a comprehensive benefits package, featuring 401k, and premium Health, Vision, and Dental Insurance options.

What StubHub employees say

Pay

Hours and flexibility

Workplace

Get the full story on Breakroom