ZipRecruiter

Log In

1

Grc Executive Director Jobs (NOW HIRING)

Workstreet

Manager, GRC Engineering

Handle high-stakes escalations with executive authority - resolve complex security issues and ... Lead, coach, and develop a pod of GRC analysts - manage 3-5 analysts through direct coaching ...

Workstreet

Senior Manager, GRC Engineering

Get to know the GRC Engineering Team Our GRC Engineering team is the primary point of contact for ... executive interface, driving proactive engagement and holistic account health while directing an ...

Workstreet

$150 - $190/hr

Own executive client account management - act as the primary point of contact across client ... Direct and develop engineering pods - manage, mentor, and coach a dedicated pod of 3 to 5 analysts ...

V-Comply

Account Executive

Sunnyvale, CA · Remote

$120K - $140K/yr

Company Description VComply is an agile cloud (software as a service) GRC platform with ... This is an excellent opportunity to lead our sales cycles, have direct input into the sales process ...

V-Comply

Account Executive

Sunnyvale, CA · On-site

$120K - $140K/yr

Company Description VComply is an agile cloud (software as a service) GRC platform with ... This is an excellent opportunity to lead our sales cycles, have direct input into the sales process ...

Adobe

GRC Strategy and Insights Lead

San Jose, CA · On-site

We seek a GRC Strategy & Security Insights Lead to drive a data driven shift in our GRC program ... Build executive dashboards and narratives, translating complex data for leadership * Establish ...

Adobe

GRC Strategy and Insights Lead

Lehi, UT · On-site

We seek a GRC Strategy & Security Insights Lead to drive a data driven shift in our GRC program ... Build executive dashboards and narratives, translating complex data for leadership * Establish ...

previous pagenext page

Showing results 21-40

All JobsTechnology JobsNetworking JobsGrc Executive Director Jobs

Grc Executive Director information

See salary details

$36.5K

$89.8K

$165.5K

How much do grc executive director jobs pay per year?

As of Sep 4, 2026, the average yearly pay for grc executive director in the United States is $89,818.00, according to ZipRecruiter salary data. Most workers in this role earn between $50,000.00 and $117,000.00 per year, depending on experience, location, and employer.

What is a GRC Executive Director?

GRC Executive Directors are senior leaders responsible for overseeing an organization's Governance, Risk, and Compliance (GRC) programs. They develop and implement strategies to ensure the company adheres to legal regulations, manages risks effectively, and maintains strong ethical standards. Their role often involves coordinating with other executives, reporting to the board of directors, and ensuring that risk management and compliance initiatives align with the organization's goals. GRC Executive Directors play a critical role in safeguarding the organization’s reputation and operational integrity.

What are the key skills and qualifications needed to thrive as a GRC Executive Director?

To excel as a GRC Executive Director, you need deep expertise in governance, risk management, and compliance, often supported by advanced degrees and certifications like CISA, CISM, or CRISC. Familiarity with GRC platforms (such as RSA Archer or MetricStream), regulatory frameworks, and audit management systems is essential. Outstanding leadership, strategic thinking, and influence are crucial soft skills for driving organizational change and stakeholder engagement. These capabilities ensure robust risk mitigation, regulatory adherence, and alignment of compliance initiatives with business objectives.

How does a GRC Executive Director typically collaborate with other departments to implement effective governance, risk, and compliance programs?

A GRC Executive Director works closely with leaders from departments such as IT, legal, finance, and operations to ensure that governance, risk management, and compliance initiatives are aligned across the organization. This often involves facilitating cross-functional meetings, developing unified policies, and overseeing the integration of risk assessment tools. Successful collaboration requires strong communication skills and the ability to translate complex regulatory requirements into actionable processes. By building strong partnerships, the GRC Executive Director ensures that the organization can proactively manage risks and meet compliance obligations.

What is the difference between Grc Executive Director vs Grc Manager?

AspectGrc Executive DirectorGrc Manager
CredentialsTypically requires advanced certifications like CISA, CRISC, or CISSP, along with extensive experienceRequires similar certifications but often less experience; may include CISA or CRISC
Work EnvironmentStrategic leadership role overseeing entire GRC programs at an organizational levelOperational role managing day-to-day GRC activities and teams
Employer & Industry UsageUsed in large corporations, financial institutions, and consulting firmsCommon in mid-sized to large organizations across various industries

The Grc Executive Director focuses on strategic oversight and policy development for GRC initiatives, while the Grc Manager handles daily operations and team management. Both roles require relevant certifications, but the Executive Director typically has more experience and a broader scope of responsibilities.

More about Grc Executive Director jobs

What cities are hiring for Grc Executive Director jobs?

Cities with the most Grc Executive Director job openings:

What states have the most Grc Executive Director jobs?

States with the most job openings for Grc Executive Director jobs include:

What job categories do people searching Grc Executive Director jobs look for?

The top searched job categories for Grc Executive Director jobs are:

Grc Executive Director jobs near you
Infographic showing various Grc Executive Director job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 85% Full Time, 12% Part Time, 1% Temporary, and 1% Contract. Highlights an 91% Physical, 3% Hybrid, and 6% Remote job distribution, with an average salary of $89,818 per year, or $43.2 per hour.

Manager, GRC Engineering

Workstreet

Remote

Full-time

Re-posted 25 days ago

Job description

About Workstreet
At Workstreet, we're on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.
Get to know the GRC Engineering Team
Our GRC Engineering team is the primary point of contact for Workstreet's clients. We bring deep framework compliance knowledge and program management to each engagement to ensure our clients' compliance goals are met. Our teammates are trusted advisors not only in the compliance space, but also operationally in the role of vCISO. We deliver quickly using common templates and methodologies and are adept at creative problem-solving. GRC Engineering Team members also listen for and act as a centralized resource to advise clients on Workstreet's other service offerings to support their compliance, privacy, and information security goals.
The Opportunity
We are seeking a Manager, GRC Engineering (vCISO) who leads with a client-first mindset and brings the executive presence, technical depth, and relationship skills to serve as a trusted security leader for a portfolio of clients. The ideal candidate is a seasoned security professional who knows how to build trust with executive stakeholders, speak fluently about complex security architectures, and represent clients confidently on their most important prospect and customer calls.
The successful candidate will be able to come up to speed quickly, integrate into the organization, and take on clients within your first 30 days. You will serve as the dedicated virtual CISO for a portfolio of clients, owning strategic security relationships end-to-end, guiding risk and compliance decisions with authority, and ensuring every client can count on you as a security expert.
What You'll Do
  • Own the vCISO relationship end-to-end - serve as the dedicated virtual CISO for a portfolio of clients, operating with the executive authority, credibility, and trust of an embedded security leader.
  • Lead strategic client engagements and security roadmaps - guide clients from initial risk assessment through certification milestones, providing proactive executive guidance, strategic direction, and risk management aligned to business goals.
  • Represent clients on live prospect and customer calls - join client sales and due diligence calls as their acting CISO, answering technical security questions in real-time with total fluency in their architecture and controls without notes.
  • Handle high-stakes escalations with executive authority - resolve complex security issues and client escalations with urgency and composure, making independent, authoritative security calls without deferring judgment.
  • Deliver contextualized strategic security leadership - deeply understand each client's tech stack, business model, and risk appetite to produce custom architecture recommendations, threat models, policy sets, and executive briefings.
  • Lead comprehensive risk and compliance oversight - conduct risk assessments, maintain registers, and guide programs across frameworks including SOC 2, ISO 27001, ISO 42001, HIPAA, CMMC, NIST CSF/800-171, GDPR, CCPA, DORA, and NYDFS.
  • Manage continuous compliance and security operations - facilitate quarterly access reviews, annual pentests, and tabletop IR exercises while leveraging GRC platforms (Vanta, Drata, SecureFrame) for continuous audit readiness.
  • Maintain proactive client mastery - participate in regular syncs, contextualize GRC platform telemetry, track architectural changes, and identify emerging risks before they manifest into operational blockers.
  • Lead, coach, and develop a pod of GRC analysts - manage 3-5 analysts through direct coaching, performance management, and delivery oversight to drive high-quality execution across active client accounts.
  • Drive internal practice development and pre-sales - refine internal vCISO playbooks, mentor junior practice members, and join pre-sales scoping discussions to support proposal development.

Who You Are
  • Extensive information security leadership experience - you bring 8+ years of experience in information security, including at least 3 years in a senior security leadership role, driving security strategy, governance, and risk management across complex environments.
  • Demonstrated client relationship management - you're comfortable owning client engagements, leading difficult conversations, serving as a trusted security advisor, and building long-term relationships with executive stakeholders.
  • Executive-level security communication - you're confident discussing security architecture, compliance posture, and control trade-offs with clients and prospects, translating complex technical concepts into practical business decisions without sacrificing accuracy.
  • Deep expertise in cybersecurity frameworks - you have extensive hands-on knowledge of frameworks and standards such as SOC 2, ISO 27001, NIST CSF, HIPAA, HITRUST, NIST SP 800-171, and/or CMMC, helping organizations build and mature security programs.
  • Strong program and client management skills - you're experienced managing multiple security programs or client engagements simultaneously, ideally within consulting, advisory, or fractional security leadership environments.
  • Exceptional communication skills - you communicate with clarity, confidence, and precision, effectively translating technical risks into business language for executive, technical, and non-technical audiences.
  • Independent decision-maker - you're comfortable owning your client portfolio, exercising sound judgment, and making informed security decisions independently while maintaining accountability for outcomes.
  • Strong technical cloud security expertise - you have practical experience implementing and evaluating security controls across cloud platforms such as AWS, GCP, and Azure, with a solid understanding of cloud security architecture and best practices.

What will help you succeed
  • Active executive security credentials - hold recognized professional certifications such as CISSP, CISM, or CISA.
  • Fractional or vCISO practice tenure - prior experience delivering virtual CISO, fractional security leadership, or advisory services within a managed security service provider (MSSP) environment.
  • Compliance automation platform mastery - hands-on experience leveraging automated GRC platforms such as Vanta, Drata, or Secureframe for continuous posture tracking.
  • Demonstrated delivery of ISO 42001 - recent and hands-on experience as a lead implementor or lead auditor for ISO 42001.
  • Complex certification audit leadership - track record supporting client organizations through formal SOC 2 Type II audits, ISO 27001 certifications, or CMMC assessments.
  • Specialized framework familiarity - exposure to emerging or regulatory frameworks such as ISO 42001 (AI Management), GDPR, CCPA, DORA, or NIST 800-171.
  • Regulated sector domain expertise - industry experience navigating the unique security and regulatory constraints of SaaS, fintech, or healthcare.

What We Offer
  • Career Development: Clear path with mentorship and training opportunities.
  • Role-Related Training: Reimbursement for the successful completion of approved training and certification courses relevant to your current role.
  • Competitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.
  • Growth Opportunity: Early-stage company with significant room for career advancement.
  • Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.

What You'll Need to Thrive
  • Excellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams.
  • A reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration.
  • Commitment to working a standard schedule of 8:00 AM-5:00 PM US Eastern Time (ET) to effectively support hiring managers, candidates, and cross-functional teams. Occasional flexibility to adjust working hours is expected to accommodate changing business priorities, global collaboration, and time-sensitive hiring needs.
  • Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.

Hiring and Selection Process
  • Candidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding.
  • Employment is contingent upon successful completion of identity verification and background screening, where permitted by law.
  • Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with Workstreet's operating principles.
  • Candidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step.
  • Applicants must be authorized to work in the U.S. without the need for visa sponsorship now or in the future. Workstreet does not provide employment-based visa sponsorship or transfers for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1 (OPT/CPT), J-1, or any other work-authorized visa category.

Workstreet Is An Equal Opportunity Employer
As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.
All employment is decided on the basis of qualifications, merit, and business need. In order to ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veterans' Readjustment Assistance Act of 1974, Title I of the Americans with Disabilities Act of 1990, and any other applicable federal, state or local laws, applicants who require reasonable accommodation in the job application process may contact accommodationsus@workstreet.com

Apply