ZipRecruiter

Log In

1

Grc Professional Jobs (NOW HIRING)

next page

Showing results 1-20

All JobsGrc Professional Jobs

Grc Professional information

See salary details

$11

$21

$32

How much do grc professional jobs pay per hour?

As of Jun 15, 2026, the average hourly pay for grc professional in the United States is $21.32, according to ZipRecruiter salary data. Most workers in this role earn between $17.55 and $23.08 per hour, depending on experience, location, and employer.

What does a GRC professional do?

A GRC (Governance, Risk, and Compliance) professional manages an organization’s policies and procedures to ensure regulatory compliance, risk management, and effective governance. They often analyze risks, develop controls, and use tools like audit software to support security and compliance efforts within the organization.

What are the key skills and qualifications needed to thrive as a GRC (Governance, Risk, and Compliance) Professional, and why are they important?

To thrive as a GRC Professional, you need a solid understanding of regulatory frameworks, risk management principles, and compliance requirements, often supported by a degree in business, law, or information security. Familiarity with GRC platforms like RSA Archer, MetricStream, or ServiceNow GRC, and certifications such as CISA, CRISC, or CISSP, are commonly expected. Attention to detail, strong analytical thinking, and effective communication are crucial soft skills for interpreting regulations and advising stakeholders. These skills ensure organizations effectively manage risks, maintain compliance, and build a resilient, ethical business environment.

What is the difference between Grc Professional vs Compliance Analyst?

AspectGrc ProfessionalCompliance Analyst
CertificationsISO 31000, COSO, CISAISO 37001, CCEP, CISA
Work EnvironmentRisk management, governance, compliance teamsRegulatory compliance, audit, and policy enforcement
Industry UsageFinance, healthcare, technologyFinance, healthcare, manufacturing

Grc Professionals focus on overall governance, risk, and compliance strategies, often working across multiple domains. Compliance Analysts primarily concentrate on ensuring adherence to specific regulations and policies. While both roles require similar certifications and work in related environments, Grc Professionals have a broader scope, whereas Compliance Analysts specialize in regulatory compliance tasks.

Is GRC high paying?

GRC (Governance, Risk, and Compliance) professionals often earn competitive salaries, especially with experience and relevant certifications like CISA or CISSP. Salaries vary by industry and location but generally reflect the specialized skills required for managing compliance frameworks and risk assessments.

What jobs pay $10,000 a month without a degree?

GRC (Governance, Risk, and Compliance) professionals can potentially earn $10,000 or more per month through roles such as senior compliance managers or cybersecurity consultants, especially with specialized skills and certifications like CISSP or CISA. These positions often require experience, industry knowledge, and sometimes certifications but may not always require a formal degree.

What are some common challenges GRC Professionals face when implementing new compliance frameworks within an organization?

GRC Professionals often encounter challenges such as resistance to change from employees, integrating new compliance frameworks with existing processes, and ensuring that all departments understand and adhere to updated policies. Navigating complex regulatory requirements and translating them into practical, actionable steps for the business can also be demanding. Successful GRC Professionals typically address these challenges through clear communication, cross-functional collaboration, and ongoing education to foster a culture of compliance.

What jobs pay $500,000 a year?

High-level executive roles such as Chief Executive Officers (CEOs), Chief Financial Officers (CFOs), and other C-suite positions often reach or exceed $500,000 annually, especially in large corporations. Additionally, specialized roles like top-tier investment bankers, successful entrepreneurs, and certain senior technology executives can also earn this level of compensation, often including bonuses, stock options, or profit sharing.

What are GRC professionals?

GRC professionals are experts who manage Governance, Risk, and Compliance within an organization. They help companies develop and enforce policies, assess and mitigate risks, and ensure compliance with relevant laws and regulations. Their work is crucial for maintaining ethical standards, avoiding legal penalties, and supporting business objectives. GRC professionals often collaborate with departments across the organization to create integrated frameworks that promote accountability and transparency.
More about Grc Professional jobs
What cities are hiring for Grc Professional jobs? Cities with the most Grc Professional job openings:
What are the most commonly searched types of Grc jobs? The most popular types of Grc jobs are:
What states have the most Grc Professional jobs? States with the most job openings for Grc Professional jobs include:
What job categories do people searching Grc Professional jobs look for? The top searched job categories for Grc Professional jobs are:
Grc Professional jobs near you
Infographic showing various Grc Professional job openings in the United States as of June 2026, with employment types broken down into 77% Full Time, and 23% Part Time. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $44,338 per year, or $21.3 per hour.
Cyber - SAP Security and GRC Access & Process Control Manager

Cyber - SAP Security and GRC Access & Process Control Manager

Deloitte

Mclean, VA • On-site

Other

Posted 16 days ago

Deloitte rating

8.1

Company rating: 8.1 out of 10

Based on 86 frontline employees who took The Breakroom Quiz

58th of 138 rated financial services

Job description

SAP Security and GRC Manager / Engineering Manager II

Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver solutions that help clients navigate evolving threats, strengthen resilience, and support secure business transformation. In this role, you will help organizations manage SAP security and governance, risk, and compliance requirements across implementation and transformation programs.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As an Engineering Manager II on the Enterprise Security team, you will be responsible for supporting SAP security and GRC implementations, assessments, and transformation initiatives across client environments.

  • Lead SAP ECC and SAP S/4HANA security assessments, design, and implementation activities across complex business and technology environments
  • Design, build, test, and deploy end-user and IT support security roles across SAP platforms, including Fiori, Ariba, Integrated Business Planning, Business Technology Platform, and Business Data Cloud
  • Configure and implement SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management
  • Support SAP GRC Process Control design and configuration, including controls, risks, subprocesses, organizations, assignments, and continuous control monitoring capabilities
  • Manage project workstreams, client stakeholders, and delivery teams while providing recommendations on SAP security role design, segregation of duties, vulnerability findings, and regulatory control requirements

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to mentor and provide clear guidance to others

The team

Deloitte's Enterprise Security Offering helps clients embed security across digital transformation initiatives by securing core technology environments while enabling business change. The team supports work spanning security architecture, secure development and deployment, cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Qualifications

Required:

  • Bachelor's degree
  • 8+ years of experience with SAP S/4HANA security and SAP Governance, Risk, and Compliance (GRC) Access Control
  • 8+ years of hands-on experience implementing security for SAP S/4HANA, Fiori, Ariba, Integrated Business Planning (IBP), Business Technology Platform (BTP), and Business Data Cloud (BDC), including requirement gathering, security design, and deployment
  • Demonstrated delivery of 3+ full-cycle SAP GRC Access Control implementation projects, SAP S/4HANA security implementations, and 2+ SAP GRC Process Control implementations
  • 5+ years of experience designing, configuring, and implementing SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • Previous consulting experience
  • Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
  • Experience with SAP identity and access governance
  • Experience with cloud security and cloud migrations
  • Experience with SAP business process controls and data protection tools such as NextLabs
  • Experience with vulnerability management tools such as Onapsis

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Qualifications:

SAP Security and GRC Manager / Engineering Manager II

Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver solutions that help clients navigate evolving threats, strengthen resilience, and support secure business transformation. In this role, you will help organizations manage SAP security and governance, risk, and compliance requirements across implementation and transformation programs.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As an Engineering Manager II on the Enterprise Security team, you will be responsible for supporting SAP security and GRC implementations, assessments, and transformation initiatives across client environments.

  • Lead SAP ECC and SAP S/4HANA security assessments, design, and implementation activities across complex business and technology environments
  • Design, build, test, and deploy end-user and IT support security roles across SAP platforms, including Fiori, Ariba, Integrated Business Planning, Business Technology Platform, and Business Data Cloud
  • Configure and implement SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management
  • Support SAP GRC Process Control design and configuration, including controls, risks, subprocesses, organizations, assignments, and continuous control monitoring capabilities
  • Manage project workstreams, client stakeholders, and delivery teams while providing recommendations on SAP security role design, segregation of duties, vulnerability findings, and regulatory control requirements

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to mentor and provide clear guidance to others

The team

Deloitte's Enterprise Security Offering helps clients embed security across digital transformation initiatives by securing core technology environments while enabling business change. The team supports work spanning security architecture, secure development and deployment, cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Qualifications

Required:

  • Bachelor's degree
  • 8+ years of experience with SAP S/4HANA security and SAP Governance, Risk, and Compliance (GRC) Access Control
  • 8+ years of hands-on experience implementing security for SAP S/4HANA, Fiori, Ariba, Integrated Business Planning (IBP), Business Technology Platform (BTP), and Business Data Cloud (BDC), including requirement gathering, security design, and deployment
  • Demonstrated delivery of 3+ full-cycle SAP GRC Access Control implementation projects, SAP S/4HANA security implementations, and 2+ SAP GRC Process Control implementations
  • 5+ years of experience designing, configuring, and implementing SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • Previous consulting experience
  • Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
  • Experience with SAP identity and access governance
  • Experience with cloud security and cloud migrations
  • Experience with SAP business process controls and data protection tools such as NextLabs
  • Experience with vulnerability management tools such as Onapsis

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Education:Bachelor's DegreeEmployment Type:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply