ZipRecruiter

Log In

1

Governance Risk Compliance Jobs (NOW HIRING)

SWIVEL

VP Governance Risk & Compliance

San Antonio, TX

$113K - $152K/yr

This role leads a team of professionals accountable for multiple functions associated with governance, risk, and compliance for the payment processing product and services that SWIVEL offers. The ...

New

next page

Showing results 1-20

All JobsGovernance Risk Compliance Jobs

Governance Risk Compliance information

See salary details

$31.5K

$68.7K

$112K

How much do governance risk compliance jobs pay per year?

As of Jul 17, 2026, the average yearly pay for governance risk compliance in the United States is $68,732.00, according to ZipRecruiter salary data. Most workers in this role earn between $49,000.00 and $86,500.00 per year, depending on experience, location, and employer.

Is GRC an entry level job?

Governance, Risk, and Compliance (GRC) roles can be entry-level or require experience depending on the specific position. Entry-level GRC jobs typically focus on supporting compliance activities and may require basic knowledge of regulations and tools like audit software, while more advanced roles demand prior experience and specialized certifications.

Is governance risk and compliance a good career?

Governance, Risk, and Compliance (GRC) is a growing field that offers opportunities in managing organizational policies, regulatory requirements, and risk mitigation. It often requires knowledge of industry standards, certifications like CISA or CRISC, and strong analytical skills. The role provides stability and advancement potential in various industries, including finance, healthcare, and technology.

What is the work of governance risk and compliance?

Governance, Risk, and Compliance (GRC) professionals develop and implement policies to ensure organizations adhere to legal and regulatory requirements, manage risks effectively, and maintain ethical standards. They often use tools like risk assessments, audits, and compliance frameworks to identify vulnerabilities and ensure organizational integrity. The role requires strong analytical skills and knowledge of industry regulations.

What Are Jobs in Governance, Risk and Compliance?

Governance risk compliance (GRC) is a method for managing and strategizing an organization's regulations regarding governance, financial or physical risk, and regulatory compliance. It aligns the IT aspects with business objectives and works to improve the efficiency of a company. There are GRC consultants and GRC analysts who provide an assessment of a business’s GRC, identify risks, analyze the data, develop policies to benefit the workplace, and consult on the best choice of action. Your duties may involve optimizing GRC systems, implementing tactics to lower risk, providing internal audits, assisting with cybersecurity, creating routine reports, and ensuring regulatory compliance.

What is the salary of governance risk compliance?

The salary for a Governance, Risk, and Compliance (GRC) professional typically ranges from $70,000 to $130,000 annually, depending on experience, location, and certifications such as CISA or CRISC. Entry-level roles may start lower, while senior positions or those in high-demand industries can earn higher salaries.

What is Governance, Risk, and Compliance (GRC)?

Governance, Risk, and Compliance (GRC) is a coordinated strategy that organizations use to manage overall governance, enterprise risk management, and compliance with regulations and standards. GRC professionals help organizations align their business objectives with risk management practices and regulatory requirements. This role involves identifying potential risks, implementing policies to mitigate those risks, and ensuring that the organization adheres to legal, ethical, and internal standards. Effective GRC management can improve decision-making, optimize processes, and protect the organization from financial or reputational harm.

How does a Governance, Risk, and Compliance (GRC) professional typically collaborate with other departments within an organization?

GRC professionals work closely with a variety of departments, including IT, legal, finance, and operations, to ensure that organizational policies and regulatory requirements are consistently met. Collaboration often involves leading risk assessments, facilitating compliance training, and coordinating audits to identify and mitigate potential risks. Effective communication and relationship-building are key, as GRC teams must translate complex regulations into actionable steps for different business units. This cross-functional approach helps embed a culture of compliance and risk awareness throughout the organization.

What is the difference between Governance Risk Compliance vs Risk Analyst?

AspectGovernance Risk ComplianceRisk Analyst
CertificationsCRISC, CISA, CISSPCFA, FRM, CRISC
Work EnvironmentCorporate, regulated industriesFinancial, consulting firms
Employer & Industry UsageFinancial institutions, healthcare, governmentBanking, investment firms, insurance

Governance Risk Compliance focuses on establishing policies, ensuring regulatory adherence, and managing enterprise-wide risks. Risk Analysts primarily assess specific financial or operational risks through data analysis. While both roles involve risk management, Governance Risk Compliance has a broader scope related to organizational compliance and governance frameworks, whereas Risk Analysts concentrate on analyzing and quantifying particular risks.

What are the key skills and qualifications needed to thrive as a Governance Risk Compliance (GRC) professional, and why are they important?

To thrive as a Governance Risk Compliance professional, you need a solid understanding of regulatory frameworks, risk management principles, and policy development, often supported by a degree in business, law, or information security. Familiarity with GRC software platforms, compliance management systems, and certifications like CISA, CRISC, or CISSP is highly valuable. Strong analytical thinking, attention to detail, and effective communication skills set top performers apart in this field. These competencies are essential for ensuring organizational compliance, minimizing risks, and maintaining robust corporate governance.
More about Governance Risk Compliance jobs
What cities are hiring for Governance Risk Compliance jobs? Cities with the most Governance Risk Compliance job openings:
What are the most commonly searched types of Governance Risk Compliance jobs? The most popular types of Governance Risk Compliance jobs are:
What states have the most Governance Risk Compliance jobs? States with the most job openings for Governance Risk Compliance jobs include:
What job categories do people searching Governance Risk Compliance jobs look for? The top searched job categories for Governance Risk Compliance jobs are:
Governance Risk Compliance jobs near you
Infographic showing various Governance Risk Compliance job openings in the United States as of July 2026, with employment types broken down into 1% As Needed, 82% Full Time, 12% Part Time, 1% Temporary, and 4% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $68,732 per year, or $33 per hour.
IT Governance, Risk, & Compliance Manager

IT Governance, Risk, & Compliance Manager

Qualcomm

San Diego, CA • On-site

Full-time

Posted 29 days ago

Qualcomm rating

9.6

Company rating: 9.6 out of 10

Based on 5 frontline employees who took The Breakroom Quiz

5th of 209 rated software companies

Job description

Company:
Qualcomm Incorporated
Job Area:
Information Technology Group, Information Technology Group > IT Project Management
General Summary:
This is an exciting opportunity to join the Offices of the CIO (OCIO) at Qualcomm. As part of the OCIO, the IT Governance, Risk, and Compliance (GRC) team's mission is to drive IT risk management and compliance strategy, capabilities, and deliverables across the organization.
Our team is seeking a seasoned IT Governance, Risk, & Compliance Manager for our San Diego, CA office. The ideal candidate will have 5-7 years of experience in IT governance, risk management, and compliance or IT audit roles. This role is critical in ensuring our IT operations identify and treat risks, meet all regulatory requirements, and comply with internal policies. The IT GRC Manager will serve as a trusted advisor to the IT leadership team, establishing a culture of strong governance, risk awareness, operational resilience, and compliance organization wide.
* This position is not eligible for Qualcomm immigration sponsorship. *
** Position requires to be onsite in San Diego, 5 days a week. **
Minimum Qualifications:
• 4+ years of Project Management-relevant work experience with a Bachelor's degree.
OR
6+ years of Project Management-relevant work experience without a Bachelor's degree.
Key Responsibilities
  • Audit Liaison & Management: Facilitate internal and external IT audits by working closely with auditors. Support alignment on audit scope, ensure auditors receive necessary documentation, and track audit status from initiation to completion. Manage post-audit activities, including addressing findings and implementing corrective action plans to remediate control deficiencies in a timely manner.
  • Compliance & Risk Oversight: Oversee and drive compliance with relevant laws, regulations, and industry standards. Maintain up-to-date knowledge of regulations and standards such as SOX and ISO 27001, ensuring that IT policies and controls meet those requirements. Conduct regular IT risk assessments and maintain a risk register, developing mitigation strategies for identified risks, and monitoring their effectiveness.
  • Third-Party Risk Management: Perform and document SOC report reviews to ensure critical service providers meet the organization's operational resilience standards and regulatory compliance requirements. Address any identified risks in vendor relationships by recommending and following up on mitigation actions.
  • Software Audits: Perform self-assessments to ensure timely identification and remediation of issues regarding software usage. Manage the preparation of vendor audits with internal stakeholders. Facilitate the vendor audit to ensure alignment on scope and timely support of documentation requests. Manage post-audit activities including remediation in a timely manner.
  • Reporting & Communication: Prepare clear and comprehensive reports for IT leadership and relevant stakeholders on the state of IT compliance, risk levels, audit outcomes, and remediation progress. Present findings and recommendations in a concise, professional manner to support informed decision-making by senior management.
  • Policy Development & Governance: Support the development of IT governance policies, standard operating procedures, and control documentation. Ensure all policies are aligned with best practices and regulatory requirements, communicated to all relevant personnel, and regularly reviewed for effectiveness. Promote a strong governance and compliance culture through training and awareness initiatives.
  • GRC Tool Administration: Utilize GRC platforms such as ServiceNow IRM and AuditBoard for tracking compliance activities, managing risk assessments, documenting controls, and monitoring the status of audits and remediation efforts. Leverage these tools to streamline workflows and improve visibility into the organization's risk and compliance posture.
  • Cross-Functional Collaboration: Work closely with cross-functional teams-including IT Operations, Information Security, Internal Audit, Finance, and Legal-to ensure a holistic approach to governance, risk, and compliance. Serve as a central point of contact for GRC matters, facilitating collaboration and consensus among stakeholders and ensuring that compliance and risk management objectives are integrated into business processes.

Preferred Qualifications & Skills
  • Experience: 5-7 years of hands-on experience in IT governance, risk management, and compliance or IT audit roles. This experience should include managing audit processes and implementing IT control frameworks.
  • Regulatory & Technical Acumen: Strong understanding of IT general controls, risk assessment methodologies, and regulatory compliance best practices. Capable of staying current with changes in relevant laws and regulations.
  • Third-Party Risk Assessments: Ability to evaluate and manage risks associated with external service providers to ensure their preparedness aligns with organizational resilience and statutory requirements.
  • GRC Tools Proficiency: Proficiency in using GRC and audit management tools.
  • Advanced Education: A Master's degree in Information Security, Information Systems, Business Administration, or a related field is a plus.
  • Certification: Possession of at least one relevant information security or audit certification, such as CISA, CISM, or CISSP (required).
  • Additional Frameworks: Familiarity with other governance, risk, and security frameworks or regulations (e.g., NIST CSF, COBIT, GDPR) is beneficial.
  • Program Leadership: Experience in developing or maturing GRC or IT Resilience programs, as well as prior experience leading or mentoring a team in risk management or compliance initiatives.
  • Strategic Mindset: Strong business acumen, with the ability to align GRC efforts to support organizational goals and improve operational resilience. Experience in driving process improvements and adapting GRC strategies in response to emerging risks or changes in the business environment.

Key Qualifications & Skills - At a Glance
  • Experience: 5-7 years of hands-on experience in IT governance, risk management, and compliance or IT audit roles.
  • Compliance Frameworks: Strong knowledge of SOX; familiarity with ISO/IEC 27001.
  • GRC Tools & Platforms: Proficient in using ServiceNow IRM and AuditBoard
  • Soft Skills: Excellent communication, collaboration, attention to detail, problem-solving, adaptability, leadership, integrity.

Qualcomm is an equal opportunity employer. If you are an individual with a disability and need an accommodation during the application/hiring process, rest assured that Qualcomm is committed to providing an accessible process. You may e-mail disability-accomodations@qualcomm.com or call Qualcomm's toll-free number found here. Upon request, Qualcomm will provide reasonable accommodations to support individuals with disabilities to be able participate in the hiring process. Qualcomm is also committed to making our workplace accessible for individuals with disabilities. (Keep in mind that this email address is used to provide reasonable accommodations for individuals with disabilities. We will not respond here to requests for updates on applications or resume inquiries).
To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at Qualcomm. Staffing and recruiting agencies and individuals being represented by an agency are not authorized to use this site or to submit profiles, applications or resumes, and any such submissions will be considered unsolicited. Qualcomm does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to our jobs alias, Qualcomm employees or any other company location. Qualcomm is not responsible for any fees related to unsolicited resumes/applications.
EEO Employer: Qualcomm is an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or any other protected classification.
Qualcomm expects its employees to abide by all applicable policies and procedures, including but not limited to security and other requirements regarding protection of Company confidential information and other confidential and/or proprietary information, to the extent those requirements are permissible under applicable law.
Pay range and Other Compensation & Benefits:
$123,200.00 - $184,800.00
The above pay scale reflects the broad, minimum to maximum, pay scale for this job code for the location for which it has been posted. Even more importantly, please note that salary is only one component of total compensation at Qualcomm. We also offer a competitive annual discretionary bonus program and opportunity for annual RSU grants (employees on sales-incentive plans are not eligible for our annual bonus). In addition, our highly competitive benefits package is designed to support your success at work, at home, and at play. Your recruiter will be happy to discuss all that Qualcomm has to offer - and you can review more details about our US benefits at this link.
If you would like more information about this role, please contact Qualcomm Careers.

What Qualcomm employees say

Pay

Benefits

Workplace

Get the full story on Breakroom

Qualcomm logo

About Qualcomm

Sourced by ZipRecruiter

Qualcomm is enabling a world where everyone and everything can be intelligently connected. You interact with products and technologies made possible by Qualcomm every day, including 5G-enabled smartphones that double as pro-level cameras and gaming devices, smarter vehicles and cities, and the technology behind the smart, connected factories that manufactured your latest purchase. Our powerful connectivity solutions keep you connected—even in remote areas. Qualcomm 5G and AI innovations are the power behind the connected intelligent edge. You’ll find our technologies behind and inside the innovations that deliver significant value across multiple industries and to billions of people every day.

Industry

Technology, communication and media

Company size

10,000+ Employees

Headquarters location

San Diego, CA, US

Year founded

1985

View All Qualcomm Jobs

Apply