ZipRecruiter

Log In

1

Grc Associate Jobs (NOW HIRING)

Sub-Zero Group, Inc.

GRC Analyst I

Madison, WI · On-site

The GRC Analyst I also supports emerging AI Governance initiatives by assisting with the ... Associate's or Bachelor's degree in enterprise risk management, information technology ...

Mariner Wealth Advisors

Champion and build the Cyber GRC function, from vision through execution--including the creation ... We believe in giving associates progressive opportunities, actively nurturing professional growth ...

Sub-Zero, Inc.

GRC Analyst I

Madison, WI · On-site

The GRC Analyst I also supports emerging AI Governance initiatives by assisting with the ... Associate's or Bachelor's degree in enterprise risk management, information technology ...

Trustmark Bank

Overview The IT GRC Analyst operates within the enterprise Cybersecurity Operations function and ... Associates are expected to perform all additional duties as assigned. Qualifications * Bachelor ...

LogicGate

Professional Services Associate

Bellevue, WA · On-site

$70K - $80K/yr

The GRC market is rapidly expanding with continuous growth opportunities. The current market size was valued at $50.5 billion in 2024 and is projected to reach $104.5 billion by 2031.

previous pagenext page

Showing results 21-40

All JobsTechnology JobsNetworking JobsApplication Security Specialist JobsGrc Associate Jobs

Grc Associate information

See salary details

$10

$19

$33

How much do grc associate jobs pay per hour?

As of Sep 11, 2026, the average hourly pay for grc associate in the United States is $19.87, according to ZipRecruiter salary data. Most workers in this role earn between $14.90 and $20.67 per hour, depending on experience, location, and employer.

What is a GRC associate?

GRC Associates are professionals who support an organization's efforts in Governance, Risk, and Compliance (GRC). They help ensure that the company adheres to laws, regulations, and internal policies while managing risks effectively. Their responsibilities typically include monitoring compliance, performing risk assessments, supporting audits, and helping implement risk management strategies. GRC Associates often collaborate with various departments to promote a culture of compliance and mitigate potential risks to the organization.

What are the key skills and qualifications needed to thrive as a GRC associate?

To thrive as a GRC Associate, you need a solid understanding of governance, risk management, and compliance principles, often supported by a relevant degree or certifications such as CISA, CRISC, or ISO 27001. Familiarity with GRC software platforms, risk assessment tools, and regulatory frameworks like SOX or GDPR is typically required. Strong analytical thinking, attention to detail, and effective communication are important soft skills in this role. These abilities ensure accurate risk identification, effective compliance processes, and clear reporting to stakeholders, which are crucial for organizational integrity and risk mitigation.

What are some common challenges GRC associates face when working across different departments?

GRC Associates often collaborate with various departments such as IT, legal, and operations to ensure compliance and risk management initiatives are effectively implemented. One common challenge is navigating differing priorities and communication styles between teams, which can require strong interpersonal and negotiation skills. Additionally, keeping up with frequent changes in regulations means GRC Associates must be adaptable and proactive in updating processes and training colleagues. Building trust and fostering collaboration across departments is key to overcoming these challenges and driving successful governance, risk, and compliance outcomes.

What is the difference between Grc Associate vs Compliance Analyst?

AspectGrc AssociateCompliance Analyst
Required CredentialsBachelor's degree, certifications like CISA or CRISC often preferredBachelor's degree, certifications such as CCEP or CISA common
Work EnvironmentCorporate, financial, or consulting firms focusing on governance, risk, and complianceRegulatory agencies, financial institutions, or corporate compliance departments
Employer & Industry UsageUsed in industries with strong risk management focus, including finance and consultingCommon in regulated industries like banking, healthcare, and finance

The Grc Associate and Compliance Analyst roles share similar credentials and work environments, often overlapping in financial and corporate sectors. While Grc Associates focus on overall governance, risk, and compliance frameworks, Compliance Analysts tend to specialize in regulatory adherence and policy implementation. Both roles are essential for maintaining organizational compliance and risk management strategies.

How to get a GRC associate job with no experience?

To qualify for a GRC (Governance, Risk, and Compliance) associate role with no experience, focus on gaining foundational knowledge through online courses or certifications in cybersecurity, risk management, or compliance. Developing skills in tools like Excel and understanding regulatory frameworks such as GDPR or HIPAA can also improve your chances; internships or entry-level positions can provide practical experience to build your resume.

Is GRC an entry-level job?

A GRC Associate role is often considered entry-level or suitable for candidates with limited experience, typically requiring foundational knowledge of governance, risk management, and compliance principles. Many positions offer on-the-job training and may require basic certifications or skills in cybersecurity, audit, or regulatory frameworks.

Is it hard to get a GRC job?

Getting a GRC (Governance, Risk, and Compliance) associate position can be competitive, often requiring relevant education, certifications like CISA or CISSP, and some experience in risk management or compliance. Strong analytical skills and knowledge of regulations such as GDPR or HIPAA can improve chances of securing the role.

What cities are hiring for Grc Associate jobs?

Cities with the most Grc Associate job openings:

What are the most commonly searched types of Grc jobs?

The most popular types of Grc jobs are:

What states have the most Grc Associate jobs?

States with the most job openings for Grc Associate jobs include:

What are popular job titles related to Grc Associate jobs?

For Grc Associate jobs, the most frequently searched job titles are:

Infographic showing various Grc Associate job openings in the United States as of September 2026, with employment types broken down into 80% Full Time, and 20% Contract. Highlights an 100% In-person job distribution, with an average salary of $41,327 per year, or $19.9 per hour.

IT Security Associate (GRC) in Charlotte, NC 28202 (Hybrid)

Charlotte, NC • On-site

Amicis Global
See more jobs at Amicis Globalexternal

CA$56/hr

Contractor

Re-posted 3 days ago

Key responsibilities

  • Perform information security risk assessments for SaaS, cloud-based solutions, client initiatives, and regulatory requests.

  • Review and assess third-party security postures through reports, certifications, and questionnaires.

  • Support remediation efforts by tracking issues, validating responses, and documenting outcomes.

Job description

Job Title:  IT Security Associate (GRC)
Location: Charlotte, NC 28202 (Hybrid)
Duration: 06 - 12 Months
 
Pay Rate: $50.00 - $56.00/- on W2
 
 
Kindly help me out with your most updated resume
 
 
Summary:
Seeking a 1st Line of Defense – GRC Specialist at the Associate level who has a strong passion for Information Security risk management and is interested in building a career at a fast-growing reputable bank.
As an Associate within GRC, you will play a vital role in protecting information assets by conducting comprehensive risk assessments, collaborating with stakeholders, and driving process improvements.
Reporting to the Head of Security Risk Assessments, you will help shape the bank's security risk management practices and ensure compliance with internal and external standards.
 
Roles and Responsibilities:
•Perform information security risk assessments for new and existing SaaS and cloud-based solutions, client initiatives, and regulatory-driven requests.
•Review and assess third‐party security postures by analyzing SOC 1 and SOC 2 reports, ISO 27001 certifications, penetration test summaries, SIG responses, and security questionnaires.
•Evaluate SaaS architectures, data flows, and hosting models, with particular attention to data protection, encryption, identity and access management, logging, and monitoring.
•Identify control gaps, assess both inherent and residual risk, and partner with stakeholders to define practical mitigation strategies or compensating controls.
•Translate technical and operational risks into clear, business‐focused language that resonates with both technical and non‐technical audiences.
•Collaborate regularly with IT, business, risk, and compliance teams to support timely, well‐informed decision making.
•Support remediation efforts by tracking open issues, validating responses, and documenting outcomes through established governance processes.
•Stay current with information security policies, standards, and procedures, and help stakeholders understand how changes may impact risk assessments.
•Contribute to the ongoing improvement of risk assessment processes, templates, and tooling.
Required Experience and Skills
•2–3 years of experience in banking, financial services, or another highly regulated environment.
•Hands-on familiarity with cloud service providers such as AWS, Azure, or GCP, and an understanding of how SaaS applications are built on cloud infrastructure.
•A solid foundation in information security principles, risk assessment concepts, and control-based evaluations.
•Working knowledge of common security and regulatory frameworks, including NIST, NYDFS Cybersecurity Regulation, GLBA, ISO 27001, NIST CSF, and data privacy regulations such as CCPA/CPRA.
•Basic understanding of enterprise systems, operating systems, databases, identity and access concepts.
•Strong written and verbal communication skills, with the ability to explain security risk clearly and concisely.
•Comfortable working independently while also collaborating effectively across technical and business teams.
•Well-organized, detail-oriented, and able to manage multiple assessments and competing priorities.
•A strong sense of ownership and follow-through.
•Ability to track and maintain risk assessment data and metrics using tools such as Microsoft Excel, Jira, or similar platforms.
Preferred / Nice to Have
•Experience supporting third‐party or vendor risk management programs.
•Exposure to GRC platforms or security risk assessment tools.
•Experience reviewing and interpreting SOC reports.
•Current or in progress security certifications (e.g., CompTIA Security+, CompTIA Cloud+, AWS, Azure, GCP, CCSP, CRISC).