1

Governance Risk Compliance Analyst Jobs (NOW HIRING)

Robert Half is seeking an experienced AI Risk & Compliance Analyst to support the intake ... This is a hands-on role for a practitioner with direct experience in AI governance, AI risk ...

Knowledge of Governance, Risk, and Compliance (GRC) and Audit practices and experience with ... Exceptional analytical, investigative, and problem-solving skills * High integrity with the ability ...

next page

Showing results 1-20

Governance Risk Compliance Analyst information

See salary details

$15

$40

$65

How much do governance risk compliance analyst jobs pay per hour?

As of Jun 20, 2026, the average hourly pay for governance risk compliance analyst in the United States is $40.49, according to ZipRecruiter salary data. Most workers in this role earn between $29.81 and $49.28 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Governance Risk Compliance Analyst, and why are they important?

To thrive as a Governance Risk Compliance (GRC) Analyst, you need a solid understanding of risk management, regulatory frameworks, and auditing, typically supported by a degree in business, finance, or a related field. Familiarity with GRC software platforms (like RSA Archer or MetricStream), as well as certifications such as CISA or CRISC, are commonly required. Analytical thinking, attention to detail, and excellent communication skills help you navigate complex regulations and collaborate with various stakeholders. These competencies ensure organizations maintain compliance, manage risks effectively, and uphold strong corporate governance.

What are some common challenges faced by Governance Risk Compliance Analysts when implementing new compliance frameworks?

Governance Risk Compliance (GRC) Analysts often encounter challenges such as ensuring organization-wide adoption of new compliance policies, interpreting evolving regulations, and integrating compliance requirements into existing business processes. They must frequently collaborate with multiple departments, which can involve aligning different stakeholders’ priorities and addressing resistance to change. Successfully navigating these challenges requires strong communication skills, the ability to translate complex regulations into practical steps, and a proactive approach to continuous training and awareness.

Is a GRC analyst a good entry level job?

A Governance Risk Compliance (GRC) analyst can be suitable as an entry-level position for individuals interested in risk management, compliance, and cybersecurity frameworks. It typically requires foundational knowledge of regulations, policies, and tools like audit software, with opportunities for professional growth through certifications such as CISA or CISSP.

What does a governance risk and compliance analyst do?

A governance risk and compliance analyst evaluates an organization’s policies, procedures, and controls to ensure adherence to legal and regulatory requirements. They identify potential risks, develop mitigation strategies, and monitor compliance using tools like audit software, often supporting risk management frameworks and reporting processes.

What is the difference between Governance Risk Compliance Analyst vs Compliance Analyst?

AspectGovernance Risk Compliance AnalystCompliance Analyst
CertificationsISO 31000, CRISC, CISAISO 37001, CCEP, CIA
Work EnvironmentCorporate, financial, or regulatory settingsVarious industries, including healthcare, finance, and manufacturing
Primary FocusRisk management, governance frameworks, compliance policiesEnsuring adherence to laws, regulations, and standards

The Governance Risk Compliance Analyst primarily focuses on establishing and maintaining risk management and governance frameworks within organizations, while the Compliance Analyst concentrates on ensuring adherence to specific laws and regulations. Both roles require similar certifications and often work in corporate environments, but their core responsibilities differ in scope and focus.

What is the salary of governance risk compliance?

The salary for a Governance Risk Compliance Analyst typically ranges from $60,000 to $110,000 annually, depending on experience, location, and industry. Entry-level positions may start lower, while experienced professionals with certifications like CRISC or CISA can earn higher salaries. The role often requires knowledge of regulatory frameworks and risk management tools.

What does a Governance Risk Compliance (GRC) Analyst do?

A Governance Risk Compliance (GRC) Analyst is responsible for ensuring an organization adheres to regulatory requirements, internal policies, and risk management best practices. They identify potential risks, evaluate the effectiveness of existing controls, and recommend improvements to mitigate risks. GRC Analysts also help develop and maintain compliance frameworks, conduct audits, and provide training to staff on compliance matters. Their work helps protect organizations from legal penalties, reputational damage, and operational disruptions.

Is governance risk and compliance a good career?

Governance, Risk, and Compliance (GRC) analysts play a key role in helping organizations manage regulatory requirements, security policies, and risk mitigation. The field offers steady demand, opportunities for certification such as CISA or CRISC, and potential for career advancement in various industries. It is suitable for individuals with strong analytical skills, attention to detail, and knowledge of compliance frameworks like ISO or GDPR.
More about Governance Risk Compliance Analyst jobs
What cities are hiring for Governance Risk Compliance Analyst jobs? Cities with the most Governance Risk Compliance Analyst job openings:

Junior Governance, Risk & Compliance Analyst

leeenterprises

Davenport, IA • On-site

$60K - $80K/yr

Other

Posted 15 days ago


Job description

Lee Enterprises is seeking a motivated Junior GRC Analyst to join our growing Governance, Risk & Compliance (GRC) team. This part-time, developmental position offers an opportunity to gain direct exposure to enterprise risk management, compliance, and governance initiatives in a fast-paced, collaborative environment.

This role serves as a launchpad — after a successful 90-day performance review, the position may transition into a full-time GRC Analyst role with expanded responsibilities and a competitive annual salary ($60K–$80K, commensurate with experience and performance).

The ideal candidate is curious, detail-oriented, and eager to learn. You’ll work closely with senior members of the GRC team and cross-functional partners in Legal, Finance, IT, and Operations to strengthen our risk-aware culture and governance practices.

KEY RESPONSIBILITIES

Risk Identification & Monitoring

  • Assist in identifying, assessing, and tracking risks across IT and enterprise functions.
  • Support maintenance of the enterprise risk register and dashboards used by leadership.

Governance & Compliance Support

  • Help draft, organize, and maintain policies, standards, and procedures.
  • Support compliance awareness campaigns and training that promote a culture of risk accountability.

Framework Alignment

  • Learn and assist in mapping controls to frameworks such as NIST CSF, COBIT 2019, and ISO 27001.
  • Support tracking and validation of control effectiveness through GRC tools or reports.

Collaboration & Reporting

  • Partner with GRC leadership to prepare reports, metrics, and presentations for management.
  • Contribute to meetings with stakeholders across Legal, Finance, IT, and Operations.

Operational Support & Learning

  • Provide day-to-day administrative and research assistance to the GRC team.
  • Demonstrate initiative, curiosity, and a commitment to learning risk and compliance fundamentals.

QUALIFICATIONS

Must Have:

  • Strong organizational and written communication skills.
  • Detail-oriented with an analytical mindset and ability to problem-solve.
  • Interest in learning frameworks such as NIST, COBIT, ISO 27001, or SOC 2.
  • Desire to learn, hunger to achieve, and persistence to accomplish.

Nice to Have:

  • Internship experience in governance, risk, compliance, audit, or related disciplines (internships and academic experience welcome).
  • Bachelor’s degree (completed or in progress) in Information Security, Risk Management, Business Administration, or a related field — or equivalent experience.
  • Experience supporting policy writing, audits, or risk assessments.
  • Exposure to GRC tools or risk management platforms.
  • Familiarity with cybersecurity, data protection, or IT operations concepts.
  • Relevant certifications (e.g., Security+, CISA, CISM, CGRC) are a plus.

Why Join the GRC Team?

  • Opportunity to develop real-world GRC experience in a supportive environment.
  • Work directly with senior GRC leadership and cross-functional teams.
  • Build the skills needed to progress into a full-time GRC Analyst role.
  • Gain enterprise-wide exposure to risk management, compliance, and governance functions.
  • Be part of a team driving a risk-first culture across the organization.