1

Grc Analyst Jobs in Raleigh, NC (NOW HIRING)

Overview The Sr. Analyst, Governance, Risk, and Compliance (GRC) plays an important role in the GRC delivery framework, ensuring Black & Veatch's compliance with contractual and regulatory ...

As a Security Analyst at Lucid Software, you will protect our corporate assets, world-class web ... You will focus on the execution of day-to-day GRC (Governance, Risk, and Compliance) operations ...

As a Security Analyst at Lucid Software, you will protect our corporate assets, world-class web ... You will focus on the execution of day-to-day GRC (Governance, Risk, and Compliance) operations ...

Job Summary - Risk Analysis (Raleigh, NC) - Identify, assess, and mitigate risks across business ... GRC) initiatives, policy reviews, audit readiness, issue management, control monitoring, and ...

New

Risk Analysis Location :: Raleigh, NC / Phoenix, AZ Type :: Fulltime Risk Analysis Must Have ... GRC) initiatives, policy adherence reviews, audit readiness, issue management, control monitoring ...

New

Risk Analysis

Raleigh, NC · On-site

$100K - $120K/yr

Risk Analysis Must Have Technical/Functional Skills • Risk identification, assessment, mitigation ... GRC) initiatives, policy adherence reviews, audit readiness, issue management, control monitoring ...

New

As a security analyst at Lucid you will be helping to protect corporate assets, including our world ... party risk management, GRC, customer due diligence, etc. * Understanding of common security ...

As a security analyst at Lucid you will be helping to protect corporate assets, including our world ... party risk management, GRC, customer due diligence, etc. * Understanding of common security ...

Responsibilities GRC Platform Implementation & Automation Lead implementation and administration of ... We're one of the largest information and analytics companies on the planet. We design solutions ...

Responsibilities GRC Platform Implementation & Automation Lead implementation and administration of ... We're one of the largest information and analytics companies on the planet. We design solutions ...

next page

Showing results 1-20

Grc Analyst information

See Raleigh, NC salary details

$35.5K

$94.9K

$222.1K

How much do grc analyst jobs pay per year?

As of Jul 26, 2026, the average yearly pay for grc analyst in Raleigh, NC is $94,928.00, according to ZipRecruiter salary data. Most workers in this role earn between $53,500.00 and $107,900.00 per year, depending on experience, location, and employer.

Is GRC a good career?

A GRC (Governance, Risk, and Compliance) analyst plays a key role in managing an organization’s security policies, risk assessments, and regulatory compliance. It is a growing field with demand for professionals skilled in frameworks like ISO, NIST, and tools such as audit management software. The role often requires certifications like CISA or CISSP and offers opportunities for career advancement in cybersecurity and risk management.

Is GRC an entry level job?

GRC Analyst roles can be entry-level or require some experience, depending on the organization. Entry-level positions typically focus on basic compliance, risk management, and security controls, often requiring foundational knowledge of cybersecurity or IT. More advanced roles may demand certifications like CISSP or CISA and prior experience in security or audit functions.

What are the key skills and qualifications needed to thrive in the Grc Analyst position, and why are they important?

To thrive as a GRC Analyst, you need a solid understanding of governance, risk management, and compliance frameworks, often complemented by a degree in information security, business, or a related field. Experience with GRC platforms (like RSA Archer, ServiceNow, or LogicManager), and certifications such as CISA, CRISC, or CISSP are highly valued. Strong analytical thinking, attention to detail, effective communication, and collaboration skills set outstanding GRC Analysts apart. These capabilities are vital for ensuring organizations meet regulatory requirements, identify and mitigate risks, and foster a culture of compliance.

What does a GRC analyst do?

A GRC analyst (Governance, Risk, and Compliance analyst) is responsible for managing an organization’s compliance with regulations, assessing and mitigating risks, and developing governance frameworks. They often use tools like risk management software and require knowledge of industry standards such as ISO or NIST. The role involves analyzing policies, conducting audits, and ensuring security controls are effective.

Do GRC analysts work from home?

GRC analysts can often work remotely, especially if their employer supports telecommuting and the role involves tasks like risk assessment, policy development, and compliance monitoring that can be performed online. However, some positions may require on-site presence for meetings, audits, or access to secure systems.

What are the typical daily responsibilities of a GRC Analyst?

GRC Analysts are responsible for monitoring and assessing organizational policies, procedures, and controls to ensure compliance with internal and external regulations. Their daily tasks often include performing risk assessments, maintaining documentation, supporting audits, analyzing data for potential security gaps, and preparing reports for management. They regularly collaborate with IT, legal, and business teams to remediate vulnerabilities and strengthen compliance programs. This dynamic role requires both independent research and cross-departmental communication to help organizations proactively manage risk and regulatory obligations.

What is a GRC Analyst job?

A GRC (Governance, Risk, and Compliance) Analyst is responsible for ensuring that an organization adheres to regulatory requirements, industry standards, and internal policies. They assess risks, implement compliance programs, and monitor security controls to protect data and systems. Their role often involves working with various departments to identify vulnerabilities, develop risk mitigation strategies, and prepare reports for audits. GRC Analysts play a key role in maintaining regulatory compliance and enhancing an organization's overall security posture.

What are the most commonly searched types of Grc Analyst jobs in Raleigh, NC? The most popular types of Grc Analyst jobs in Raleigh, NC are:
What cities near Raleigh, NC are hiring for Grc Analyst jobs? Cities near Raleigh, NC with the most Grc Analyst job openings:
Infographic showing various Grc Analyst job openings in Raleigh, NC as of July 2026, with employment types broken down into 87% Full Time, 8% Part Time, 1% Temporary, and 4% Contract. Highlights an 85% Physical, 6% Hybrid, and 9% Remote job distribution, with an average salary of $94,928 per year, or $45.6 per hour.
Senior GRC Analyst

Senior GRC Analyst

Black & Veatch

Cary, NC • Hybrid

Other

Medical, Dental, Vision, Life, Retirement, PTO

Posted 6 days ago


Black & Veatch rating

8.9

Company rating: 8.9 out of 10

Based on 19 frontline employees who took The Breakroom Quiz

54th of 442 rated engineering


Job description

Together, we own our company, our future, and our shared success.

As an employee-owned company, our people are Black & Veatch. We put them at the center of everything we do and empower them to grow, explore new possibilities and use their diverse talents and perspectives to solve humanity's biggest challenges in an ever-evolving world. With over 100 years of innovation in sustainable infrastructure and our expertise in engineering, procurement, consulting and construction, together we are building a world of difference.

Company : Black & Veatch Corporation

Req Id : 115500

Opportunity Type : Staff

Relocation eligible : No

Full time/Part time : Full-Time

Project Only Hire : No

Visa Sponsorship Available: No

Why Black & Veatch?

Black & Veatch allows you to lend your talent and perspective to humanity's biggest challenges in a flexible environment where you are empowered to grow and explore new possibilities. We offer competitive compensation, 401k match and benefits that start day one.

Our hybrid environment allows you to balance your work and personal life. At Black & Veatch, you own your career with purpose and meaning. You are empowered to grow and explore new possibilities at every step of your career journey. Bring your big ideas knowing you are safe to be who you are and speak up with concerns or questions and put your diverse talents and perspectives to use.

Overview

The Sr. Analyst, Governance, Risk, and Compliance (GRC) plays an important role in the GRC delivery framework, ensuring Black & Veatch's compliance with contractual and regulatory requirements, assessing control design and operation against common standards and frameworks, and assisting with third-party/supply chain risk management. The candidate will also promote a culture of risk awareness across the enterprise among other responsibilities. With an emphasis on cyber, contract and regulatory compliance risk management, the ideal candidate should be able to contribute to measuring success and identifying improvement opportunities and capabilities development in these areas.

This role is ideal for a detail-oriented professional with a passion for cyber and compliance risk management who is comfortable operating independently. Independent and critical thinking is absolutely necessary to be successful in this role as is a desire to drive efficiencies in function delivery and day-to-day tasks.

Key Responsibilities
  • Proven experience reviewing client contract provisions related to data security, breach reporting, cyber resilience, and compliance certifications and measuring compliance in IT and security architecture and operations.
  • Support independent certification and audit by working with D&IT peer groups and lines of business to collect documentation and evidence of security policies and operations
  • Request and review documentation and evidence from control owners to certify and validate compliance to standards and industry-accepted best practice
  • Monitor regulatory and legal landscape at a global scale and across market sectors and maintain awareness of compliance requirements
  • Act as an informed voice in development of policy and ensure alignment with regulatory, legal, and contractual requirements
  • Assist establishment and enforcement of standards of practice documentation to be referenced by architecture and operations teams
  • Contribute process and subject matter expertise in governance forums and cross-functional committees
  • Collaborate with peer D&IT groups to collect KPI's, KRI's and drive efficiency through automation and other means
  • Contribute subject matter expertise through third party risk assessment process
  • Identify and communicate risk of vendor engagements and mitigation actions to business owners and D&IT stakeholders
  • Assist review of client security requirements in contracts and aggregate relevant clauses to inform contractual risk
  • Assist development of user training aligned with cyber threat landscape, establish and implement metrics, and propose enhancements
Preferred Qualifications
  • Strong analytical, organizational, and communication skills
  • Professional certifications such as CRISC, CISSP or others
  • Experience with ServiceNow Risk Management platform
  • Knowledge of FAR, DFARS, CMMC
  • Experience with GRC platforms and risk management methodologies
  • Ability to work independently and collaboratively as required
Minimum Qualifications
  • Bachelor's degree in information systems, Information Security, or a related field
  • 7-10 years of experience in GRC executing or auditing against standards, frameworks, and industry regulations
  • Demonstrated experience supporting GRC functions for global companies
  • Solid proficiency in risk assessment methodologies and frameworks
  • Proven ability to assess alignment of internal policy, process, control design and operations, and cyber risk management with regulatory standards and frameworks
  • Strong collaboration with IT teams
  • Familiarity with industry standards and frameworks (e.g., NIST CSF and supporting SP's, ISO 27001, AICPA SOC)
  • Working knowledge of cyber and privacy laws and regulations
  • Solid understanding of information security principles and concepts
  • Strong desire to create task and functional efficiencies through use of technology and tools, especially GenAI
Salary Plan
ITS: Information Technology Service
Job Grade
016

Black & Veatch endeavors to make www.bv.com/careers accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process because of a disability, please contact the Employee Relations Department at +1-913-359-1622 or via our accommodations request form. This contact information is for disability accommodation requests only; you may not use this contact information to inquire about the status of applications. General inquiries about the status of applications will not be returned.

Black & Veatch is committed to being an employer of choice by creating a valuable work experience that keeps our people engaged, productive, safe and healthy.

Our comprehensive benefits portfolio is a key component of this commitment and offers an array of health care benefits including but not limited to medical, dental and vision insurances along with disability and a robust wellness program.

To support a healthy work-life balance, we offer flexible work schedules, paid vacation and holiday time, sick time, and dependent sick time.

A variety of additional benefits are available to our professionals, including a company-matched 401k plan, adoption reimbursement, tuition reimbursement, vendor discounts, an employment referral program, AD&D insurance, pre-taxed accounts, voluntary legal plan and the B&V Credit Union. Professionals may also be eligible for a performance-based bonus program.

We are proud to be a 100 percent ESOP-owned company. As employee-owners, our professionals are empowered to drive not only their personal growth, but the company's long-term achievements - and they share in the financial rewards of the success through stock ownership.

By valuing diverse voices and perspectives, we cultivate an authentically inclusive environment for professionals and are able to provide innovative and effective solutions for clients.

BVH, Inc., its subsidiaries and its affiliated companies, complies with all Equal Employment Opportunity (EEO) laws and regulations. Black & Veatch does not discriminate on the basis of age, race, religion, color, sex, national origin, marital status, genetic information, sexual orientation, gender Identity and expression, disability, veteran status, pregnancy status or other status protected by law.

Notice to External Search Firms: Black & Veatch does not accept unsolicited resumes and will not be obligated to pay a placement fee for unsolicited resumes. Black & Veatch Talent Acquisition engages with search firms directly for hiring needs.


What Black & Veatch employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom


Black & Veatch logo

About Black & Veatch

Sourced by ZipRecruiter

Company: Black & Veatch Family of Companies Together, we own our company, our future, and our shared success. As an employee-owned company, our people are Black & Veatch. We put them at the center of everything we do and empower them to grow, explore new possibilities and use their diverse talents and perspectives to solve humanity's biggest challenges in an ever-evolving world. With over 100 years of innovation in sustainable infrastructure and our expertise in engineering, procurement, consulting and construction, together we are building a world of difference.

Industry

Civil engineering construction

Company size

10,000+ Employees

Headquarters location

Overland Park, KS, US

Year founded

1915