Lead the assessment, configuration, and deployment of ServiceNow IRM, GRC, and SecOps modules ... BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering, Information ...
Lead the assessment, configuration, and deployment of ServiceNow IRM, GRC, and SecOps modules ... BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering, Information ...
Experience with Governance, Risk, and Compliance (GRC) tools such as RiskVision, Xacta, or JCAM. CULTURE REQUIREMENTS: • Engineers, Analysts, and Developers at Cintel, Inc. are highly motivated ...
Experience with Governance, Risk, and Compliance (GRC) tools such as RiskVision, Xacta, or JCAM. CULTURE REQUIREMENTS: • Engineers, Analysts, and Developers at Cintel, Inc. are highly motivated ...
Cybersecurity Audit Analyst
Huntsville, AL · On-site
$74K - $110K/yr
The Cybersecurity Analyst (GRC) is responsible for supporting the organization's Governance, Risk ... Collaborate with BTS, Engineering, Quality, and Operational teams to support compliance and ...
Cybersecurity Audit Analyst
Huntsville, AL · On-site
$74K - $110K/yr
The Cybersecurity Analyst (GRC) is responsible for supporting the organization's Governance, Risk ... Collaborate with BTS, Engineering, Quality, and Operational teams to support compliance and ...
Information Systems Security Engineer SME with Security Clearance
Huntsville, AL · On-site
$155K - $168K/yr
ECS is seeking an experienced Information Systems Security Engineer SME to support a mission ... Experience with GRC tools, control inheritance, evidence reuse, dashboard reporting, and workflow ...
Information Systems Security Engineer SME with Security Clearance
Huntsville, AL · On-site
$155K - $168K/yr
ECS is seeking an experienced Information Systems Security Engineer SME to support a mission ... Experience with GRC tools, control inheritance, evidence reuse, dashboard reporting, and workflow ...
Information Security Architect 4
Decatur, AL · Hybrid
$131K - $219K/yr
Retirement
PTO
... engineering knowledge with practical experience in secure cloud infrastructure, automation, and emerging AI technologies. The architect will work closely with system owners, GRC teams, and mission ...
Information Security Architect 4
Decatur, AL · Hybrid
$131K - $219K/yr
Retirement
PTO
... engineering knowledge with practical experience in secure cloud infrastructure, automation, and emerging AI technologies. The architect will work closely with system owners, GRC teams, and mission ...
Senior Security Control Assessor
Huntsville, AL · On-site
$128K - $214K/yr
Medical
Life
Retirement
PTO
Manage the SAA process for new FBI ISs and legacy FBI ISs migrating into the GRC application * Provide baseline security controls to the system owner, contingent upon the IS's security categorization ...
Senior Security Control Assessor
Huntsville, AL · On-site
$128K - $214K/yr
Medical
Life
Retirement
PTO
Manage the SAA process for new FBI ISs and legacy FBI ISs migrating into the GRC application * Provide baseline security controls to the system owner, contingent upon the IS's security categorization ...
Grc Engineer information
See Trinity, AL salary details
$53.2K - $64.9K
14% of jobs
$71.8K is the 25th percentile. Wages below this are outliers.
$64.9K - $76.5K
19% of jobs
$76.5K - $88.2K
12% of jobs
The median wage is $92.2K / yr.
$88.2K - $99.9K
17% of jobs
$99.9K - $111.5K
12% of jobs
$113.5K is the 75th percentile. Wages above this are outliers.
$111.5K - $123.2K
14% of jobs
$123.2K - $134.9K
7% of jobs
$134.9K - $146.5K
3% of jobs
$146.5K - $158.2K
0% of jobs
$158.2K - $169.9K
1% of jobs
$169.9K - $181.5K
2% of jobs
$53.2K
$99.8K
$181.5K
How much do grc engineer jobs pay per year?
As of Aug 18, 2026, the average yearly pay for grc engineer in Trinity, AL is $99,820.00, according to ZipRecruiter salary data. Most workers in this role earn between $72,000.00 and $118,500.00 per year, depending on experience, location, and employer.
What is a GRC engineer?
GRC Engineers are professionals who specialize in Governance, Risk, and Compliance (GRC) within an organization’s information security and IT frameworks. They help ensure that a company’s policies and procedures meet regulatory requirements, manage risks, and align with business objectives. GRC Engineers often implement and maintain tools, conduct risk assessments, and ensure compliance through audits and reporting. Their role is critical in minimizing risks and protecting organizational assets from security threats.
What are the key skills and qualifications needed to thrive as a GRC engineer?
To thrive as a GRC Engineer, you need a solid understanding of governance, risk management, and compliance frameworks, often supported by a degree in information security or a related field. Familiarity with GRC platforms (such as RSA Archer or ServiceNow GRC), risk assessment tools, and certifications like CISA or CISSP are highly valued. Strong analytical skills, attention to detail, and effective communication are crucial soft skills for collaborating across departments and translating complex requirements. These competencies ensure that organizations can effectively manage risk, maintain regulatory compliance, and safeguard critical information assets.
What are some common challenges faced by GRC engineers when implementing new compliance frameworks?
GRC Engineers often encounter challenges such as integrating new compliance requirements with existing IT systems, ensuring consistent documentation, and keeping up with evolving regulatory standards. Collaboration with various departments—like IT, legal, and operations—is essential to map processes accurately and address potential gaps. Proactive communication and a strong understanding of both technical and regulatory aspects help GRC Engineers overcome these hurdles and support organizational compliance effectively.
What is the difference between Grc Engineer vs Security Analyst?
| Aspect | Grc Engineer | Security Analyst |
|---|---|---|
| Certifications | ISO 27001, CISSP, CISA | CISSP, CompTIA Security+ |
| Work Environment | Policy development, compliance, risk management | Monitoring, incident response, threat analysis |
| Industry Usage | Corporate governance, compliance teams | Security operations centers, IT departments |
Grc Engineers focus on establishing and maintaining governance, risk, and compliance frameworks, ensuring organizations meet regulatory standards. Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. While both roles require security certifications and work within the cybersecurity industry, Grc Engineers emphasize policy and compliance, whereas Security Analysts focus on threat detection and response.
Are GRC engineer jobs hard to get?
GRC (Governance, Risk, and Compliance) engineer jobs can be competitive, especially for entry-level positions, but having relevant skills in cybersecurity, risk management, and certifications like CISSP or CISA can improve chances. The difficulty of securing a GRC engineer role depends on experience, education, and the demand within the industry or organization. Strong knowledge of compliance frameworks and tools is often required to stand out.
How much do GRC engineers make?
GRC (Governance, Risk, and Compliance) engineers typically earn between $80,000 and $130,000 annually, depending on experience, certifications, and location. Senior roles or those with specialized skills in cybersecurity tools and frameworks can earn higher salaries, often exceeding $150,000.
Is GRC engineer an entry-level job?
A GRC (Governance, Risk, and Compliance) engineer is typically an intermediate to senior role that requires relevant experience and knowledge of security frameworks, compliance standards, and risk management tools. Entry-level positions may be available but often require foundational skills, certifications, or internships in cybersecurity or IT governance.
Deloitte rating
8.2
Based on 92 frontline employees who took The Breakroom Quiz
44th of 150 rated financial services
Job description
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
Recruiting for this role ends on 12/31/2026.
Work you'll do
As a ServiceNow Senior Manager on the Cyber Strategy & Transformation team, you will be responsible for...
- Develop and execute strategies for integrated risk management (IRM), governance, risk, and compliance (GRC), and Security Operations (SecOps) leveraging the ServiceNow platform.
- Design and implement enterprise risk and compliance frameworks aligned with industry standards (e.g., ISO 27001, NIST, COBIT, PCI, HIPAA) using ServiceNow GRC and SecOps modules.
- Oversee the delivery of ServiceNow-based cyber risk solutions, ensuring alignment with best practices and evolving client needs.
- Lead the assessment, configuration, and deployment of ServiceNow IRM, GRC, and SecOps modules, including ITSM, ITAM, CMDB, and automation workflows.
- Drive continuous improvement by applying industry-leading practices and ServiceNow capabilities to enhance cyber risk management and service delivery.
- Serve as a trusted advisor to executive stakeholders, translating business requirements into effective ServiceNow technical solutions.
- Contribute to practice development by creating go-to-market strategies and innovative ServiceNow-based solutions for client cyber risk challenges.
- Provide thought leadership on ServiceNow GRC and SecOps trends and evaluate emerging requirements and technologies.
- Lead and mentor global teams to ensure high-quality delivery of ServiceNow cyber risk management services.
The team
Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. Includes design of the cyber organization, governance, and risk assessments.
Qualifications
Required:
- BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, Finance, Business or related field
- 10+ years of hands-on experience on Tech Risk technology solution designs and architect, including but not limited to:
- IT Operations Management (ITOM)
- IT Asset Management (ITAM)
- Integrated Risk Management (IRM)
- Security Operations (SecOps)
- Third-Party Risk Management (TPRM)
- 10+ years of demonstrated deep technical expertise in ServiceNow, typically evidenced by advanced ServiceNow certifications (e.g., Certified Application Developer, Certified Implementation Specialist, Certified Technical Architect, Certified Master Architect) and hands-on experience designing, configuring, and integrating complex ServiceNow solutions.
- 10+ years of experience leading ServiceNow implementations including solution design and technical architecture
- Previous consulting or Big 4 experience
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred:
- ServiceNow Certified Master Architect (CMA) / ServiceNow Certified Technical Architect (CTA)
- Proven experience with ServiceNow Security and GRC modules, with a strong understanding of platform capabilities and best practices.
- Exceptional documentation, presentation, and communication skills-both verbal and written-with the ability to collaborate effectively across geographically dispersed teams.
- Demonstrated adaptability in prioritizing and executing tasks, working closely with clients to identify and resolve key constraints, risks, and issues.
- Strong problem-solving, critical thinking, and logical structuring abilities.
- Hands-on experience defining epics and user stories, creating UI mock-ups, and a proactive, "roll-up-the-sleeves" approach to driving results.
- Expertise in developing business and technical design specifications for ServiceNow platform implementations.
- Skilled at leading technical design meetings, reviewing proposed solutions with stakeholders, and ensuring alignment with client objectives.
#CyberServiceNow
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $163,400 to $322,100.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Qualifications:Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
Recruiting for this role ends on 12/31/2026.
Work you'll do
As a ServiceNow Senior Manager on the Cyber Strategy & Transformation team, you will be responsible for...
- Develop and execute strategies for integrated risk management (IRM), governance, risk, and compliance (GRC), and Security Operations (SecOps) leveraging the ServiceNow platform.
- Design and implement enterprise risk and compliance frameworks aligned with industry standards (e.g., ISO 27001, NIST, COBIT, PCI, HIPAA) using ServiceNow GRC and SecOps modules.
- Oversee the delivery of ServiceNow-based cyber risk solutions, ensuring alignment with best practices and evolving client needs.
- Lead the assessment, configuration, and deployment of ServiceNow IRM, GRC, and SecOps modules, including ITSM, ITAM, CMDB, and automation workflows.
- Drive continuous improvement by applying industry-leading practices and ServiceNow capabilities to enhance cyber risk management and service delivery.
- Serve as a trusted advisor to executive stakeholders, translating business requirements into effective ServiceNow technical solutions.
- Contribute to practice development by creating go-to-market strategies and innovative ServiceNow-based solutions for client cyber risk challenges.
- Provide thought leadership on ServiceNow GRC and SecOps trends and evaluate emerging requirements and technologies.
- Lead and mentor global teams to ensure high-quality delivery of ServiceNow cyber risk management services.
The team
Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. Includes design of the cyber organization, governance, and risk assessments.
Qualifications
Required:
- BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, Finance, Business or related field
- 10+ years of hands-on experience on Tech Risk technology solution designs and architect, including but not limited to:
- IT Operations Management (ITOM)
- IT Asset Management (ITAM)
- Integrated Risk Management (IRM)
- Security Operations (SecOps)
- Third-Party Risk Management (TPRM)
- 10+ years of demonstrated deep technical expertise in ServiceNow, typically evidenced by advanced ServiceNow certifications (e.g., Certified Application Developer, Certified Implementation Specialist, Certified Technical Architect, Certified Master Architect) and hands-on experience designing, configuring, and integrating complex ServiceNow solutions.
- 10+ years of experience leading ServiceNow implementations including solution design and technical architecture
- Previous consulting or Big 4 experience
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred:
- ServiceNow Certified Master Architect (CMA) / ServiceNow Certified Technical Architect (CTA)
- Proven experience with ServiceNow Security and GRC modules, with a strong understanding of platform capabilities and best practices.
- Exceptional documentation, presentation, and communication skills-both verbal and written-with the ability to collaborate effectively across geographically dispersed teams.
- Demonstrated adaptability in prioritizing and executing tasks, working closely with clients to identify and resolve key constraints, risks, and issues.
- Strong problem-solving, critical thinking, and logical structuring abilities.
- Hands-on experience defining epics and user stories, creating UI mock-ups, and a proactive, "roll-up-the-sleeves" approach to driving results.
- Expertise in developing business and technical design specifications for ServiceNow platform implementations.
- Skilled at leading technical design meetings, reviewing proposed solutions with stakeholders, and ensuring alignment with client objectives.
#CyberServiceNow
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $163,400 to $322,100.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Education:Bachelor's DegreeEmployment Type: