ZipRecruiter

Log In

1

Governance Risk Compliance Security Manager Jobs

next page

Showing results 1-20

All JobsTechnology JobsNetworking JobsCyber Security Administrator JobsGovernance Risk Compliance Security Manager Jobs

Governance Risk Compliance Security Manager information

See salary details

$85K

$120.3K

$173K

How much do governance risk compliance security manager jobs pay per year?

As of Sep 10, 2026, the average yearly pay for governance risk compliance security manager in the United States is $120,283.00, according to ZipRecruiter salary data. Most workers in this role earn between $94,000.00 and $144,500.00 per year, depending on experience, location, and employer.

What does a Governance Risk Compliance Security Manager do?

A Governance Risk Compliance (GRC) Security Manager is responsible for overseeing an organization's security policies, risk management strategies, and compliance with relevant laws and regulations. They ensure that security measures align with business objectives and regulatory requirements, and they identify and mitigate risks to protect information assets. Their duties often include developing security frameworks, conducting risk assessments, managing audits, and providing guidance on compliance issues. By doing so, they help safeguard the organization against threats and ensure adherence to industry standards.

How does a Governance Risk Compliance Security Manager typically collaborate with other departments to ensure effective risk management?

A GRC Security Manager works closely with departments such as IT, legal, audit, and operations to create a holistic approach to risk management. They facilitate regular meetings and workshops to identify potential risks, ensure policy compliance, and implement security controls across the organization. Effective communication and cross-functional teamwork are essential, as the GRC Security Manager often bridges gaps between technical teams and business leaders to align security strategies with organizational goals.

What are the key skills and qualifications needed to thrive as a Governance Risk Compliance Security Manager, and why are they important?

To thrive as a Governance Risk Compliance (GRC) Security Manager, you need expertise in risk management, regulatory frameworks, security controls, and a background in information security or related fields, often supported by a bachelor’s degree and relevant certifications like CISSP, CISM, or CRISC. Familiarity with GRC platforms (such as RSA Archer or ServiceNow), compliance management tools, and standards like ISO 27001 or NIST is typically required. Strong leadership, analytical thinking, and effective communication skills help you collaborate with stakeholders and drive organizational change. These skills and qualities are essential to ensure that security practices align with business goals and regulatory requirements, minimizing risks and maintaining compliance.

What cities are hiring for Governance Risk Compliance Security Manager jobs?

Cities with the most Governance Risk Compliance Security Manager job openings:

What states have the most Governance Risk Compliance Security Manager jobs?

States with the most job openings for Governance Risk Compliance Security Manager jobs include:

What are popular job titles related to Governance Risk Compliance Security Manager jobs?

For Governance Risk Compliance Security Manager jobs, the most frequently searched job titles are:

Infographic showing various Governance Risk Compliance Security Manager job openings in the United States as of August 2026, with employment types broken down into 88% Full Time, 11% Part Time, and 1% Contract. Highlights an 85% Physical, 2% Hybrid, and 13% Remote job distribution, with an average salary of $120,283 per year, or $57.8 per hour.

Sr Manager, Governance, Risk, Compliance & Privacy

Plano, TX • On-site

Data Analysis Incorporated
Finance and Insurance • 51 - 200 employees
Learn more about Data Analysis Incorporatedexternal

Full-time

Re-posted 2 days ago

Key responsibilities

  • Lead the implementation and continuous improvement of governance frameworks, policies, standards, procedures, and controls related to information security, privacy, and technology compliance.

  • Manage cybersecurity, operational risk, and third-party risk management activities including risk identification, assessment, remediation tracking, and executive reporting.

  • Lead compliance initiatives supporting regulatory, contractual, and industry requirements, including audit coordination, evidence collection, remediation tracking, and certification readiness efforts.

Job description

About Us
Data Analysis Incorporated (DAI) is the controlling entity of the O'Neil family of businesses. DAI and its subsidiaries operate in diverse industries worldwide, including global equity markets, health care, financial services, digital news, and insurance. Our global footprint allows our teams to be responsive to customer needs in a timely and efficient manner. We are dedicated to using technology and innovation to bring change and growth to our businesses. We believe in a dynamic workplace, creating engaging, informative products and services that help our customers succeed. Integrity is an essential characteristic for our firms and our associates
Summary
The Senior Manager, Governance, Risk, Compliance & Privacy (GRCP) is responsible for leading and managing the organization's governance, risk, compliance, and privacy initiatives to ensure alignment with applicable laws, regulations, contractual obligations, security standards, and internal policies. This role partners closely with Information Security, IT, Legal, Human Resources, Compliance, business stakeholders, and external partners to strengthen governance practices, mature risk management processes, support audit and regulatory readiness, and promote privacy and security accountability across DAI companies.
Duties and Responsibilities
• Lead the implementation and continuous improvement of governance frameworks, policies, standards, procedures, and controls related to information security, privacy, and technology compliance.
• Manage cybersecurity, operational risk, and third-party risk management activities including risk identification, assessment, remediation tracking, and executive reporting.
• Lead compliance initiatives supporting regulatory, contractual, and industry requirements, including audit coordination, evidence collection, remediation tracking, and certification readiness efforts.
• Direct privacy and data protection activities including privacy impact assessments (PIAs/DPIAs), privacy risk assessments, privacy incident coordination, and data subject request support.
• Facilitate governance reviews, compliance meetings, and cross-functional initiatives to ensure accountability and timely remediation of identified risks and compliance gaps.
• Develop, maintain, and report metrics related to governance, risk, compliance, privacy, audits, control effectiveness, remediation activities, and program maturity.
• Partner with business and technical teams to integrate security, privacy, and compliance requirements into operational and technology processes using privacy-by-design and security-by-design principles.
• Lead enterprise-wide security and privacy awareness initiatives, training programs, communications, and guidance to promote a culture of compliance, accountability, and secure business operations.
• Support governance activities associated with incident response, business continuity, disaster recovery, crisis management, and operational resilience programs.
• Monitor evolving regulatory, privacy, and security requirements and evaluate impacts to organizational policies, controls, and business operations.
Qualifications & Requirements
Required Education, Experience, Certification/Licensure
  • Bachelor's degree in Information Security, Cybersecurity, Information Technology, Business, Risk Management, or related field.
  • Minimum 7-10 years of experience in Governance, Risk, Compliance (GRC), Privacy, Information Security, Audit, or related disciplines.
  • Experience leading or managing governance, compliance, privacy, audit, or risk management programs within complex organizations.
  • Experience supporting internal and external audits, assessments, and compliance initiatives involving security and privacy controls.
  • Experience collaborating across technical and business teams to drive governance and compliance initiatives.

Preferred Education, Experience, Certification/Licensure
  • Master's degree in a related field.
  • CISM (Certified Information Security Manager)
  • CRISC (Certified in Risk and Information Systems Control)
  • CISA (Certified Information Systems Auditor)
  • CISSP (Certified Information Systems Security Professional)
  • ISO 27001 Lead Implementer or Lead Auditor
  • CDPSE, CIPM, CIPT, or other privacy-related certifications
  • Experience supporting international privacy and regulatory compliance requirements.

KNOWLEDGE, SKILLS AND ABILITIES (KSAs)
  • Strong knowledge of governance, risk management, compliance, privacy, and information security principles.
  • Working knowledge of ISO 27001/27002, ISO 42001, SOC 2 Type II, NIST Cybersecurity Framework (CSF), NIST 800-53, HITRUST, PCI-DSS, and privacy/data protection frameworks.
  • Strong analytical, problem-solving, and risk assessment capabilities.
  • Ability to translate complex compliance, security, and privacy requirements into practical business guidance.
  • Excellent written, verbal, presentation, and stakeholder management skills.
  • Strong organizational skills with the ability to manage multiple priorities and initiatives simultaneously.
  • Experience with governance, risk, and compliance platforms and supporting technologies.
  • Familiarity with cloud security concepts, vulnerability management tools (e.g., Qualys), CNAPP platforms (e.g., Wiz, Qualys), and Identity & Access Management solutions (e.g., Ping, Auth0, Entra ID).

Working Conditions
Must be able to perform essential job duties. Work is performed primarily in an office environment. Typically requires the ability to sit for extended periods of time (66%+ each workday), hear the telephone, and enter data on a computer and may also require the ability to lift up to 10 pounds.
Equal Opportunity Employer
Data Analysis Inc is an equal opportunity employer. All aspects of employment, including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.

Apply