ZipRecruiter

Log In

1

Grc Compliance Manager Jobs (NOW HIRING)

Sakerhetsvarlden

NY · On-site

$93.19 - $134.62/hr

Tieto söker Security Compliance Manager i Solna. Fokus på GRC, DORA/NIS2, ISO 27001/ISAE 3402, audits, RFI/RFP och leverantörssäkerhet. Ansök med CV eller LinkedIn. Ny tjänst: Tieto söker ...

Elevate

Cybersecurity, IT GRC Practice Lead

Coral Gables, FL · On-site

$105K - $142K/yr

Are a leader who is also an expert in Cybersecurity and IT GRC Compliance and wants to learn more about AI Governance and AI Risk Management and more--and you love leading teams and effortlessly ...

Parafin, Inc

Compliance Manager

San Francisco, CA · On-site

$155K - $170K/yr

Familiarity with vendor management, SOC1, SOC2, risk management and GRC processes and tools * Experience designing and overseeing compliance processes * Dynamic multi-tasker who can juggle multiple ...

CapTech Consulting

GRC Team Lead

Richmond, VA · On-site

You will own CapTech's compliance posture across SOC 2, NIST 800-53, and NIST AI RMF, along with applicable privacy regulations; mature our third-party risk management program; modernize the GRC ...

MRI Software

Manager, Governance, Risk & Compliance

We are seeking an experienced Manager of Governance, Risk & Compliance (GRC) to lead and strengthen our compliance framework, risk management processes, and governance structures. You will serve as a ...

WellSky

Sr. Compliance Manager

Overland Park, KS · On-site

$2.5K/yr

The Sr. Compliance Manager is responsible for partnering with organizational leaders to provide ... Configuring and managing GRC tool, Onspring preferred * Experience with supporting SOC and HITRUST ...

WellSky

Sr. Compliance Manager

Overland Park, KS · On-site

The Sr. Compliance Manager is responsible for partnering with organizational leaders to provide ... Configuring and managing GRC tool, Onspring preferred * Experience with supporting SOC and HITRUST ...

previous pagenext page

Showing results 21-40

All JobsBusiness JobsOperations JobsOperations Professional JobsGrc Compliance Manager Jobs

Grc Compliance Manager information

See salary details

$38.5K

$95.1K

$157K

How much do grc compliance manager jobs pay per year?

As of Aug 22, 2026, the average yearly pay for grc compliance manager in the United States is $95,103.00, according to ZipRecruiter salary data. Most workers in this role earn between $70,000.00 and $116,500.00 per year, depending on experience, location, and employer.

What is a GRC Compliance Manager?

A GRC Compliance Manager is a professional responsible for overseeing an organization's Governance, Risk Management, and Compliance (GRC) programs. They ensure that the company adheres to regulatory requirements, manages risks effectively, and implements policies and procedures to maintain compliance. Their role often includes assessing internal controls, performing audits, and facilitating training to promote a culture of compliance. By proactively identifying potential risks and gaps, GRC Compliance Managers help protect the organization from legal, financial, and reputational harm.

What are the key skills and qualifications needed to thrive as a GRC Compliance Manager, and why are they important?

To thrive as a GRC Compliance Manager, you need a deep understanding of governance, risk management, and compliance frameworks, often supported by a relevant degree and certifications like CISA, CRISC, or CISSP. Familiarity with GRC tools such as RSA Archer, ServiceNow, or MetricStream, as well as knowledge of regulatory standards (e.g., SOX, GDPR), is typically required. Exceptional analytical, communication, and problem-solving skills help build strong policies and foster cross-departmental collaboration. These capabilities are vital for ensuring organizational adherence to regulations, minimizing risk, and maintaining a strong compliance posture.

What are some of the most common challenges faced by a GRC Compliance Manager, and how can they effectively address them?

GRC Compliance Managers often encounter challenges such as keeping up with evolving regulations, aligning organizational policies with industry standards, and fostering a culture of compliance across different departments. To effectively address these issues, they must stay current on regulatory updates, implement robust training programs, and collaborate closely with stakeholders in IT, legal, and business units. Regular risk assessments and clear communication channels are also key to proactively identifying and mitigating compliance gaps.

What is the difference between Grc Compliance Manager vs Risk Analyst?

AspectGrc Compliance ManagerRisk Analyst
CertificationsISO 27001 Lead Auditor, CISA, CISMFRM, CRM, CIA
Work EnvironmentCorporate, compliance departments, consulting firmsFinancial institutions, consulting, corporate risk teams
Employer & Industry UsageFinancial services, healthcare, technologyBanking, insurance, investment firms

The Grc Compliance Manager focuses on establishing and maintaining compliance frameworks, policies, and audits, ensuring organizations meet regulatory standards. The Risk Analyst evaluates potential risks, analyzes data, and develops strategies to mitigate financial and operational risks. While both roles require understanding of regulations and risk management, the Compliance Manager emphasizes compliance programs, whereas the Risk Analyst concentrates on risk assessment and data analysis.

Are GRC compliance manager jobs in demand?

GRC compliance manager jobs are in high demand due to increasing regulatory requirements and the need for organizations to manage governance, risk, and compliance effectively. Employers seek professionals with knowledge of frameworks like ISO, NIST, and certifications such as CISA or CISSP, often requiring experience with compliance tools and risk assessment processes.

What cities are hiring for Grc Compliance Manager jobs?

Cities with the most Grc Compliance Manager job openings:

What states have the most Grc Compliance Manager jobs?

States with the most job openings for Grc Compliance Manager jobs include:

Grc Compliance Manager jobs near you

Head of GRC (Governance, Risk, & Compliance)

Blitzy

Cambridge, MA • On-site

Full-time

Re-posted 7 days ago

Job description

About Blitzy
Blitzy is a Cambridge, MA based AI software development platform on a mission to revolutionize the software development life cycle by autonomously building custom software to unlock the next industrial revolution. We're transforming how enterprises build software, turning enterprise requirements into production-ready code with an agentic software development platform that can autonomously execute 80% of the quantum of software development work. We're backed by multiple tier 1 investors, and have proven success as founders of previous start-ups.
Location: 1 Kendall Square, Cambridge, MA (On-site)
Compensation: $220,000 - $260,000 plus bonus and equity, commensurate with experience
The Role
Security and compliance at Blitzy currently run on a patchwork: a Security Delegate managing our frameworks with help from an external compliance vendor, backend engineers pulled off their real jobs to answer security questions, and audit evidence assembled after the fact instead of built in from the start.
We're hiring one person to fix that. As Head of GRC, you'll own a compliance program that's audit-ready by design, not by scramble.
To be clear about scope, this role is not:
  • A paperwork-only compliance role with no rigor.
  • A job where you escalate every auditor question to engineering or to the Security Delegate.
  • A way to move our current reactive compliance model in-house unchanged - the point is to make it proactive.

What Success Looks Like
  • You spot the gap - like SSO being "available" but not "enforced" - before an auditor finds it, not after.
  • You've personally run a SOC 2 Type II or ISO 27001:2022 cycle and know exactly what auditors sample.
  • You own Vanta (or an equivalent GRC platform) as the single source of truth, not a reference tool.
  • You manage auditors and compliance partners directly, without needing anyone to run interference for you.
  • Engineers stop getting pulled into compliance busywork because you've taken security scope questions and screenshot requests off their plate.
  • You write clearly - policies, audit narratives, and questionnaire responses that hold up under scrutiny.

Areas of Ownership
Proactive Compliance & GRC Ownership
  • Own Vanta (or equivalent) as the system of record - configuring tests and keeping evidence current, not just checking a dashboard.
  • Run SOC 2 Type II and ISO 27001:2022 compliance building continuously toward what auditors actually sample, rather than scrambling before the audit window opens.
  • Manage auditor and partner relationships directly, including firms like Insight Assurance and FedRAMP platform partners such as Second Front Systems/Game Warden - without routing every conversation through the Security Delegate.
  • Build the compliance processes that don't exist yet, starting with a formal sub-processor change communication process, which is already coming up as a contractual requirement in enterprise deals.
  • Evaluate evidence critically rather than take it at face value, confirming, for example, that SSO is enforced via admin panel configuration - not just available in a settings screen.

Required Experience
  • Personal, hands-on ownership of at least one full SOC 2 Type II or ISO 27001:2022 audit cycle - not just adjacent to one.
  • Direct experience running a GRC/compliance platform (Vanta or equivalent) as the system-of-record owner.
  • A track record of managing vendor and auditor relationships independently, without hand-holding.
  • The seniority and judgment to reduce engineering interrupt load, not add to it - engineers should be comfortable handing things off to you, not double-checking your work.

What Makes You Stand Out
  • FedRAMP exposure, even at Moderate - we're targeting FedRAMP High.
  • A track record of building a compliance process from scratch, not just running an existing playbook.
  • Experience managing multiple frameworks concurrently - SOC 2, ISO 27001, and GDPR at the same time.
  • Familiarity with Google Workspace as an identity provider.
  • GDPR/data privacy program experience - cookie consent, Article 27 representative coordination, DPA review.

What Makes This Role Different
You'll have direct ownership of a function that's currently split across engineering, a Security Delegate, and an external vendor - with full autonomy to build it right from day one. That includes a seat at the table on FedRAMP, one of the most demanding compliance programs a company can pursue.
Our interview process reflects the role itself: an audit walkthrough round where you'll talk through a real SOC 2 or ISO 27001 cycle you've run and how you handled your findings.
Our Culture
Who we are:
Led by two pioneering co-founders we are one of the fastest growing companies in the U.S., creating our own category of enterprise autonomous software development. We automate thousands of hours of software development for our customers, which includes strong representation within the Fortune 500.
How we work:
We move Blitzy Fast: Time is both our company's and our clients' most precious asset. We move quickly and decisively to innovate internally and deliver exceptional software externally.
Championship Mindset: We operate like a professional sports team. We win as a team by holding ourselves and each other to high standards, collaborating in-person, and remaining focused on the mission.
Passion for Invention: We're pushing the frontier of what's possible, requiring constant innovation and iteration.
We Work for the Customer: We focus on delivering outsized value to the customers we work with and expanding those relationships into deep, meaningful partnerships.
We believe in being 'everyday athletes'-taking care of ourselves so we can bring our best minds to work. We promote great sleep, movement, and restorative activities for optimal mental performance. It makes for a happier and more productive team.
Blitzy is an equal opportunity employer committed to building a diverse and inclusive team. We believe different perspectives make us stronger.

Apply