ZipRecruiter

Log In

1

Governance Risk Compliance Consultant Jobs (NOW HIRING)

1100 Mylan Pharmaceuticals Inc.

$112 - $236/hr

Position Overview The primary purpose of the Director, Governance, Risk & Compliance (GRC) is to provide strategic leadership and enterprise oversight for the GRC program supporting the organization ...

previous page

Showing results 41-60

All JobsTechnology JobsNetworking JobsGovernance Risk Compliance Consultant Jobs

Governance Risk Compliance Consultant information

See salary details

$35.5K

$80.9K

$148.5K

How much do governance risk compliance consultant jobs pay per year?

As of Sep 7, 2026, the average yearly pay for governance risk compliance consultant in the United States is $80,929.00, according to ZipRecruiter salary data. Most workers in this role earn between $58,000.00 and $96,500.00 per year, depending on experience, location, and employer.

What does a governance risk compliance consultant do?

A Governance Risk Compliance (GRC) Consultant helps organizations identify, assess, and manage risks related to governance, regulatory requirements, and internal compliance processes. They design and implement frameworks to ensure the organization meets legal and industry standards, mitigates risks, and operates efficiently. GRC Consultants also conduct audits, develop policies, and provide training to staff to maintain a culture of compliance. Their work supports decision-making and protects the organization from legal or reputational harm.

What are the key skills and qualifications needed to thrive as a governance risk compliance consultant, and why are they important?

To thrive as a Governance Risk Compliance Consultant, you need a strong understanding of risk management principles, regulatory frameworks, and compliance standards, often supported by degrees in business, law, or information security. Familiarity with GRC software platforms like RSA Archer, MetricStream, and certifications such as CISA, CRISC, or ISO 27001 is highly valued. Exceptional analytical thinking, communication, and stakeholder management skills set top consultants apart in this field. These skills and qualifications are vital to help organizations identify risks, ensure regulatory compliance, and build effective governance structures.

What are some common challenges faced by governance risk compliance consultants when working with clients across different industries?

GRC Consultants often encounter challenges such as adapting compliance frameworks to fit unique organizational structures, navigating varying regulatory landscapes, and aligning risk management strategies with each client’s specific business objectives. Balancing the need for thorough risk assessments while maintaining efficient workflows can also be demanding. Consultants frequently work cross-functionally, requiring strong communication skills to bridge gaps between IT, legal, and operations teams. Staying updated on evolving regulations and industry best practices is critical to providing effective guidance and ensuring clients remain compliant.

What is the difference between Governance Risk Compliance Consultant vs Compliance Analyst?

AspectGovernance Risk Compliance ConsultantCompliance Analyst
CertificationsCRISC, CISA, CISMCCA, CCEP, or similar
Work EnvironmentAdvisory roles, consulting firms, corporate compliance teamsCorporate compliance departments, financial institutions, regulatory agencies
Primary FocusDeveloping governance frameworks, risk management strategies, compliance programsMonitoring compliance, conducting audits, ensuring adherence to regulations

While both roles focus on compliance, Governance Risk Compliance Consultants typically develop and advise on governance and risk strategies, whereas Compliance Analysts focus on monitoring and ensuring adherence to specific regulations within organizations.

Is governance risk compliance a good career?

A career as a Governance, Risk, and Compliance (GRC) consultant involves helping organizations manage regulatory requirements, mitigate risks, and ensure compliance with laws and standards. It requires strong analytical skills, knowledge of industry regulations, and often certifications like CISA or CRISC. The field offers growth opportunities, job stability, and the chance to work across various industries.
More about Governance Risk Compliance Consultant jobs

What cities are hiring for Governance Risk Compliance Consultant jobs?

Cities with the most Governance Risk Compliance Consultant job openings:

What states have the most Governance Risk Compliance Consultant jobs?

States with the most job openings for Governance Risk Compliance Consultant jobs include:

What job categories do people searching Governance Risk Compliance Consultant jobs look for?

The top searched job categories for Governance Risk Compliance Consultant jobs are:

Governance Risk Compliance Consultant jobs near you

Information Security Compliance Consultant - Contract - Remote

SUNSHINE ENTERPRISE USA LLC

Columbia, SC • On-site, Remote

Contractor

Re-posted 15 days ago

Job description


Information Security Compliance ConsultantLocation: 100% Remote. Preference will be given to local candidates who can come to the office as needed for client and departmental meetings, trainings, and other onsite activities.
Interview Process: 1-2 Rounds of Virtual Interviews. In person availability for interviews preferred.
Duration: 12 MonthsEmployment Type: ContractExperience Required: 12+ Years
Candidate location: No South Carolina residency required. Open to nationwide candidates. All travel-related costs for onsite work will be the responsibility of the resource no matter the frequency of onsite work.
Certification Requirement: CJIS Certification required after onboarding and processed by the client.
Project Scope:
Seeking an experienced Information Security Compliance Consultant to support statewide information security program initiatives. The consultant will assist agencies with tactical implementation of information security requirements, development and tracking of security implementation plans, compliance assessments, policy and procedure documentation, and governance activities.
The consultant will work closely with business leaders, technical teams, and third-party stakeholders to evaluate security controls, assess compliance readiness, and ensure alignment with established security frameworks and state standards. This role requires strong expertise in information security governance, risk, compliance (GRC), auditing, and regulatory frameworks.
Key Responsibilities:
• Support agencies with information security program implementation and compliance initiatives.
• Conduct interviews with business owners, technical teams, administrators, and third-party stakeholders to gather security and compliance requirements.
• Develop, document, and maintain security policies, procedures, and governance artifacts.
• Track and monitor Information Security implementation plans and remediation activities.
• Perform compliance assessments against established security frameworks and control standards.
• Review agency documentation and provide recommendations to strengthen security posture and compliance readiness.
• Analyze existing business processes and identify opportunities for improvement and risk reduction.
• Assist in developing corrective action plans (CAP) and Plans of Action & Milestones (POA&M).
• Support multiple concurrent security and compliance initiatives while maintaining project timelines.
• Prepare reports, findings, and compliance status updates for leadership and stakeholders.
• Ensure alignment with state security standards, regulatory requirements, and industry best practices.
Required Skills & Experience:
• 10+ years of Information Security and Compliance experience.
• 2+ years of experience conducting security audits or serving as an Information System Security Officer (ISSO).
• Strong working knowledge of NIST 800-53 security controls and compliance requirements.
• Experience developing and managing POA&M and Corrective Action Plans (CAP).
• 3+ years of experience working with Governance, Risk, and Compliance (GRC) platforms such as Archer or similar tools.
• Strong documentation, communication, and stakeholder management skills.
• Experience assessing security controls and compliance programs.
Preferred Skills:
• Experience developing Information Security Plans (ISPs) and System Security Plan (SSP) documentation.
• Experience managing multiple concurrent information security initiatives.
• Knowledge of IRS 1075, HIPAA, CJIS, MARS-E, and PCI-DSS compliance frameworks.
• Government or public sector experience.
• Experience with process analysis, business process re-engineering, and compliance program development.
• Strong project scheduling and resource planning capabilities.
Education
Bachelor's Degree
Preferred Certifications:
• CISA
• GSLC
Equivalent Information Security Certification

Apply