ZipRecruiter

Log In

1

Governance Risk Compliance Jobs in Silver Spring, MD

Antithesis Operations LLC

GRC Engineer

Vienna, VA · On-site

$140K - $170K/yr

... compliance posture * Support vendor security reviews on both sides: evaluating vendors we onboard and participating in customer-side reviews of us Risk Management * Maintain the risk register and ...

S&P Global

Procurement Risk & Compliance Lead

Centreville, VA · On-site

$155K/yr

Mobility Global is developing and building its third-party governance framework to support regulatory compliance, information security, and enterprise risk management. Reporting to the Global Head of ...

S&P Global

Procurement Risk & Compliance Lead

Centreville, VA · On-site

$155K/yr

Mobility Global is developing and building its third-party governance framework to support regulatory compliance, information security, and enterprise risk management. Reporting to the Global Head of ...

next page

Showing results 1-20

All JobsGovernance Risk Compliance JobsGovernance Risk Compliance Jobs in Silver Spring, MD

Governance Risk Compliance information

See Silver Spring, MD salary details

$32.6K

$71.1K

$115.8K

How much do governance risk compliance jobs pay per year?

As of Jul 27, 2026, the average yearly pay for governance risk compliance in Silver Spring, MD is $71,053.00, according to ZipRecruiter salary data. Most workers in this role earn between $50,700.00 and $89,400.00 per year, depending on experience, location, and employer.

Is GRC an entry level job?

Governance, Risk, and Compliance (GRC) roles can be entry-level or require experience depending on the specific position. Entry-level GRC jobs typically focus on supporting compliance activities and may require basic knowledge of regulations and tools like audit software, while more advanced roles demand prior experience and specialized certifications.

Is governance risk and compliance a good career?

Governance, Risk, and Compliance (GRC) is a growing field that offers opportunities in managing organizational policies, regulatory requirements, and risk mitigation. It often requires knowledge of industry standards, certifications like CISA or CRISC, and strong analytical skills. The role provides stability and advancement potential in various industries, including finance, healthcare, and technology.

What is the work of governance risk and compliance?

Governance, Risk, and Compliance (GRC) professionals develop and implement policies to ensure organizations adhere to legal and regulatory requirements, manage risks effectively, and maintain ethical standards. They often use tools like risk assessments, audits, and compliance frameworks to identify vulnerabilities and ensure organizational integrity. The role requires strong analytical skills and knowledge of industry regulations.

What Are Jobs in Governance, Risk and Compliance?

Governance risk compliance (GRC) is a method for managing and strategizing an organization's regulations regarding governance, financial or physical risk, and regulatory compliance. It aligns the IT aspects with business objectives and works to improve the efficiency of a company. There are GRC consultants and GRC analysts who provide an assessment of a business’s GRC, identify risks, analyze the data, develop policies to benefit the workplace, and consult on the best choice of action. Your duties may involve optimizing GRC systems, implementing tactics to lower risk, providing internal audits, assisting with cybersecurity, creating routine reports, and ensuring regulatory compliance.

What is the salary of governance risk compliance?

The salary for a Governance, Risk, and Compliance (GRC) professional typically ranges from $70,000 to $130,000 annually, depending on experience, location, and certifications such as CISA or CRISC. Entry-level roles may start lower, while senior positions or those in high-demand industries can earn higher salaries.

What is Governance, Risk, and Compliance (GRC)?

Governance, Risk, and Compliance (GRC) is a coordinated strategy that organizations use to manage overall governance, enterprise risk management, and compliance with regulations and standards. GRC professionals help organizations align their business objectives with risk management practices and regulatory requirements. This role involves identifying potential risks, implementing policies to mitigate those risks, and ensuring that the organization adheres to legal, ethical, and internal standards. Effective GRC management can improve decision-making, optimize processes, and protect the organization from financial or reputational harm.

How does a Governance, Risk, and Compliance (GRC) professional typically collaborate with other departments within an organization?

GRC professionals work closely with a variety of departments, including IT, legal, finance, and operations, to ensure that organizational policies and regulatory requirements are consistently met. Collaboration often involves leading risk assessments, facilitating compliance training, and coordinating audits to identify and mitigate potential risks. Effective communication and relationship-building are key, as GRC teams must translate complex regulations into actionable steps for different business units. This cross-functional approach helps embed a culture of compliance and risk awareness throughout the organization.

What is the difference between Governance Risk Compliance vs Risk Analyst?

AspectGovernance Risk ComplianceRisk Analyst
CertificationsCRISC, CISA, CISSPCFA, FRM, CRISC
Work EnvironmentCorporate, regulated industriesFinancial, consulting firms
Employer & Industry UsageFinancial institutions, healthcare, governmentBanking, investment firms, insurance

Governance Risk Compliance focuses on establishing policies, ensuring regulatory adherence, and managing enterprise-wide risks. Risk Analysts primarily assess specific financial or operational risks through data analysis. While both roles involve risk management, Governance Risk Compliance has a broader scope related to organizational compliance and governance frameworks, whereas Risk Analysts concentrate on analyzing and quantifying particular risks.

What are the key skills and qualifications needed to thrive as a Governance Risk Compliance (GRC) professional, and why are they important?

To thrive as a Governance Risk Compliance professional, you need a solid understanding of regulatory frameworks, risk management principles, and policy development, often supported by a degree in business, law, or information security. Familiarity with GRC software platforms, compliance management systems, and certifications like CISA, CRISC, or CISSP is highly valuable. Strong analytical thinking, attention to detail, and effective communication skills set top performers apart in this field. These competencies are essential for ensuring organizational compliance, minimizing risks, and maintaining robust corporate governance.
More about Governance Risk Compliance jobs
What are the most commonly searched types of Governance Risk Compliance jobs in Silver Spring, MD? The most popular types of Governance Risk Compliance jobs in Silver Spring, MD are:
What are popular job titles related to Governance Risk Compliance jobs in Silver Spring, MD? For Governance Risk Compliance jobs in Silver Spring, MD, the most frequently searched job titles are:
What job categories do people searching Governance Risk Compliance jobs in Silver Spring, MD look for? The top searched job categories for Governance Risk Compliance jobs in Silver Spring, MD are:
What cities near Silver Spring, MD are hiring for Governance Risk Compliance jobs? Cities near Silver Spring, MD with the most Governance Risk Compliance job openings:
Governance Risk Compliance jobs near you
Infographic showing various Governance Risk Compliance job openings in Silver Spring, MD as of July 2026, with employment types broken down into 1% As Needed, 82% Full Time, 12% Part Time, and 5% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $71,053 per year, or $34.2 per hour.
Information Security Governance, Risk & Compliance (GRC) Analyst

Information Security Governance, Risk & Compliance (GRC) Analyst

ASSYST, Inc.

Rockville, MD

Full-time

Posted yesterday

Job description

ASSYST is seeking an Information Security Governance, Risk & Compliance (GRC) Analyst to support our client in administering and maintaining an established enterprise Information Security Governance, Risk, and Compliance (GRC) program. This role will focus on managing Information Security Policy Exceptions and maintaining the Enterprise Information Security Risk Register using the ServiceNow Integrated Risk Management (IRM) platform.

The ideal candidate will work under the guidance of Information Security leadership to execute established governance processes, document and track information security risks, and support enterprise risk management activities. This position provides an excellent opportunity to gain hands-on experience with enterprise cybersecurity governance, information security risk management, ServiceNow IRM, and policy exception management while collaborating with experienced information security professionals.

Note: This position focuses on governance, documentation, and risk management activities. It does not involve performing security assessments, penetration testing, vulnerability assessments, audits, or compliance reviews.

Roles & Responsibilities:

  • Administer and support the Information Security Policy Exception Program.
  • Maintain and update the Enterprise Information Security Risk Register using the ServiceNow Integrated Risk Management (IRM) platform.
  • Execute established governance processes, standardized risk assessment methodologies, workflows, templates, and reporting procedures.
  • Review policy exception requests and document findings.
  • Perform information security risk analyses and provide approval or denial recommendations.
  • Document, track, and maintain identified information security risks within the enterprise Risk Register.
  • Prepare and maintain accurate policy exception tracking records.
  • Produce monthly metrics, quarterly reports, executive dashboards, and ServiceNow documentation.
  • Coordinate assigned tasks, workflows, and activities while ensuring timely completion.
  • Prepare clear and accurate technical documentation related to governance and risk management processes.
  • Collaborate with internal stakeholders to support enterprise information security governance initiatives.
  • Maintain high standards of documentation accuracy, consistency, and data integrity.
  • Provide excellent customer service while supporting governance and risk management activities.
  • Work independently while effectively managing multiple priorities and deadlines.

Required Skills & Qualifications:
Minimum Qualifications:

  • Professional experience in Information Security, IT Governance, Compliance, Risk Management, Information Technology, Audit, or a related field.
  • Basic understanding of Information Security Governance, Risk Management, and Cybersecurity principles.
  • Strong analytical and critical thinking skills.
  • Excellent written and verbal communication skills.
  • Strong organizational skills with exceptional attention to detail.
  • Ability to manage multiple priorities in a fast-paced environment.
  • Ability to quickly learn new technologies and business processes.
  • Demonstrated professionalism and ability to work independently.

Preferred Qualifications:

  • Experience using ServiceNow, preferably Integrated Risk Management (IRM).
  • Experience with Governance, Risk, and Compliance (GRC) programs or platforms.
  • Experience using Microsoft Office 365 applications.
  • Experience preparing technical documentation and reports.
  • Experience coordinating projects, tasks, or workflow activities.
  • Experience working in customer service or stakeholder-facing environments.

Knowledge & Technical Skills:

  • Cybersecurity Principles
  • Information Security Governance
  • Governance, Risk & Compliance (GRC)
  • Enterprise Risk Management
  • Risk Assessment Methodologies
  • Risk Register Management
  • ServiceNow Integrated Risk Management (IRM)
  • NIST Cybersecurity Framework (NIST CSF)
  • Risk Scoring Systems and Quantitative Risk Frameworks
  • HIPAA
  • Technical Documentation
  • Workflow Coordination
  • Microsoft Office 365

ASSYST is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, disability, military status, national origin or any other characteristic protected under federal, state, or applicable local law.