ZipRecruiter

Log In

1

Grc Risk Analyst Jobs in Baltimore, MD (NOW HIRING)

Gross, Mendelsohn & Associates, P.A.

... GRC) to build and lead our cybersecurity and IT risk advisory capabilities. This is a visible, high ... Exceptional risk analysis and problem-solving skills * Ability to align cybersecurity controls with ...

TEKsystems

Security Analyst

Columbia, MD · Hybrid

$55 - $60/hr

Description Position Overview The Information Security Analyst II (GRC) provides support for Governance, Risk, and Compliance activities aligned to NIST CSF, NIST SP 800-53, HIPAA Security Rule, and ...

AGE Solutions

Cloud SCA-R, Mid

Fort George G Meade, MD

$100K/yr

... Risk and Compliance (GRC) tools * Demonstrated ability to interpret and apply NIST SP 800-53 security controls in cloud environments * Strong analytical and technical writing skills with the ability ...

AGE Solutions

Cloud SCA-R, Senior

Fort George G Meade, MD · On-site

$115K/yr

... GRC tools * Familiarity with cloud security documentation, including SSPs, SARs, RARs, and POA&Ms * Ability to analyze complex cloud architectures and provide accurate risk assessments * Strong ...

AGE solutions

Cloud SCA-R, Senior

Fort George G Meade, MD · On-site

$115K/yr

... GRC tools * Familiarity with cloud security documentation, including SSPs, SARs, RARs, and POA&Ms * Ability to analyze complex cloud architectures and provide accurate risk assessments * Strong ...

AGE Solutions

Cloud SCA-R, Mid

Fort George G Meade, MD · On-site

$72.75 - $96.50/hr

... Risk and Compliance (GRC) tools * Demonstrated ability to interpret and apply NIST SP 800-53 security controls in cloud environments * Strong analytical and technical writing skills with the ability ...

previous pagenext page

Showing results 21-40

All JobsGrc Risk Analyst JobsGrc Risk Analyst Jobs in Baltimore, MD

Grc Risk Analyst information

See Baltimore, MD salary details

$15

$40

$65

How much do grc risk analyst jobs pay per hour?

As of Sep 4, 2026, the average hourly pay for grc risk analyst in Baltimore, MD is $40.23, according to ZipRecruiter salary data. Most workers in this role earn between $29.62 and $48.94 per hour, depending on experience, location, and employer.

What is a GRC Risk Analyst?

GRC Risk Analysts are professionals who specialize in Governance, Risk, and Compliance (GRC) within an organization. They assess and manage risks related to business operations, ensure compliance with relevant laws and regulations, and help implement policies and controls to mitigate potential threats. These analysts work closely with management to identify vulnerabilities, develop risk management strategies, and monitor the effectiveness of compliance programs. Their goal is to protect the organization from financial, legal, and reputational harm while supporting business objectives.

What are the key skills and qualifications needed to thrive as a GRC Risk Analyst?

To thrive as a GRC (Governance, Risk, and Compliance) Risk Analyst, you need a solid understanding of risk management principles, regulatory requirements, and compliance frameworks, often supported by a degree in information security, business, or a related field. Familiarity with GRC platforms (such as RSA Archer or MetricStream), risk assessment methodologies, and certifications like CRISC or CISA is highly valuable. Strong analytical thinking, attention to detail, and effective communication skills help you identify risks and convey findings to stakeholders. These skills are critical for ensuring organizational compliance, minimizing risk exposure, and supporting informed decision-making.

What are some common challenges a GRC Risk Analyst might face when implementing new risk management frameworks within an organization?

A GRC Risk Analyst often encounters challenges such as resistance to change from stakeholders, integrating new frameworks with existing processes, and ensuring consistent understanding across departments. Aligning risk management practices with organizational goals while adhering to regulatory requirements can also be complex. Success in this role requires strong communication skills, adaptability, and the ability to educate and collaborate with team members from diverse backgrounds.

What is the difference between Grc Risk Analyst vs Compliance Analyst?

AspectGrc Risk AnalystCompliance Analyst
CertificationsISO 31000, FRM, CRISCISO 19600, CCEP, CISA
Work EnvironmentRisk management teams, corporate officesRegulatory departments, corporate offices
Industry UsageFinance, banking, insurance, corporate riskFinancial services, healthcare, manufacturing
Job FocusIdentifying, assessing, and mitigating risks across enterpriseEnsuring compliance with laws and regulations

While both roles involve regulatory and risk considerations, a Grc Risk Analyst focuses on enterprise-wide risk management strategies, whereas a Compliance Analyst concentrates on adherence to specific laws and regulations. Both roles require similar certifications and often work in overlapping industries, but their core responsibilities differ in scope and focus.

What are popular job titles related to Grc Risk Analyst jobs in Baltimore, MD?

For Grc Risk Analyst jobs in Baltimore, MD, the most frequently searched job titles are:

What job categories do people searching Grc Risk Analyst jobs in Baltimore, MD look for?

The top searched job categories for Grc Risk Analyst jobs in Baltimore, MD are:

What cities near Baltimore, MD are hiring for Grc Risk Analyst jobs?

Cities near Baltimore, MD with the most Grc Risk Analyst job openings:

Grc Risk Analyst jobs near you
Infographic showing various Grc Risk Analyst job openings in Baltimore, MD as of August 2026, with employment types broken down into 1% As Needed, 87% Full Time, 9% Part Time, and 3% Contract. Highlights an 88% Physical, 4% Hybrid, and 8% Remote job distribution, with an average salary of $83,674 per year, or $40.2 per hour.

Director of Cybersecurity, Governance, Risk and Compliance

Gross, Mendelsohn & Associates, P.A.

On-site

Full-time

Re-posted 4 days ago

Job description

Gross Mendelsohn, one of the Mid-Atlantic’s leading independent CPA and advisory firms, is seeking a strategic and technically strong Director of Cybersecurity Governance, Risk & Compliance (GRC) to build and lead our cybersecurity and IT risk advisory capabilities.

This is a visible, high-impact leadership role responsible for designing, implementing, and overseeing enterprise cybersecurity and IT compliance programs for both clients and the firm, particularly government contractors and organizations operating in regulated environments.

As cybersecurity requirements continue to intensify, this role will sit at the intersection of IT architecture, regulatory compliance, risk advisory, and executive leadership. The Director will help position Gross Mendelsohn as a trusted advisor in cybersecurity governance, CUI compliance, and federal regulatory readiness.

Recognized with nine Top Workplace awards, Gross Mendelsohn is committed to professional excellence, collaboration, and long-term growth. This opportunity offers leadership visibility, strategic influence, and the ability to build and expand a critical service line within a respected independent firm.

Key Responsibilities

Cybersecurity & IT Governance Leadership

  • Serve as the firm’s senior leader for cybersecurity governance, risk, and compliance advisory services

  • Design and oversee enterprise cybersecurity frameworks aligned with NIST CSF, NIST SP 800-171, NIST SP 800-53, ISO 27001, and related standards

  • Lead end-to-end CUI and federal compliance programs, including development and maintenance of System Security Plans (SSP) and Plans of Action & Milestones (POA&M)

  • Conduct NIST SP 800-171 gap assessments and develop prioritized remediation roadmaps

  • Support clients with DFARS 252.204-7012 compliance, SPRS scoring, and CMMC readiness initiatives

  • Prepare clients for audits, mock assessments, and government inquiries

IT Infrastructure & Security Oversight

  • Oversee implementation and validation of technical cybersecurity controls, including:

  • Multi-factor authentication

  • Encryption (data at rest and in transit)

  • Endpoint protection

  • Logging, SIEM, and continuous monitoring

  • Network segmentation

  • Secure configuration and hardening standards

  • Provide advisory oversight of secure cloud environments, including Microsoft GCC High, Azure Government, and AWS GovCloud

  • Establish identity and access management frameworks and privileged access controls

  • Evaluate backup, disaster recovery, and business continuity processes

  • Direct incident response strategy and regulatory reporting obligations

Supply Chain & Flow-Down Advisory

  • Advise prime contractors on subcontractor cybersecurity flow-down requirements

  • Assess subcontractor readiness and compliance risk exposure

  • Support documentation required for federal scrutiny

Training & Continuous Improvement

  • Develop and deliver CUI-specific and role-based cybersecurity training

  • Implement measurable security awareness initiatives, including phishing simulations

  • Lead annual program reviews and continuous improvement initiatives

  • Maintain compliance posture during infrastructure changes, acquisitions, or system transitions

Executive Advisory & Reporting

  • Prepare executive-level cybersecurity risk reports and board-ready briefings

  • Translate complex technical risk into actionable business guidance

  • Collaborate with firm leadership to expand cybersecurity service offerings

  • Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field

  • 7–12+ years of progressive experience in cybersecurity, IT risk, compliance, or security architecture

  • Demonstrated experience leading CUI, DFARS, and NIST 800-171 compliance initiatives

  • Experience working within a government contractor or regulated environments strongly preferred

  • Experience with secure federal cloud platforms such as GCC High or GovCloud preferred

  • Professional certifications preferred: CISSP, CISM, CISA, ISO 27001 Lead Implementer, Security+, or equivalent

Required Skills and Competencies

      Technical Expertise

  • Deep understanding of modern IT infrastructure, cloud security, and cybersecurity architecture

  • Strong working knowledge of NIST frameworks and federal cybersecurity regulations

  • Experience leading risk assessments and remediation programs

  • Strong documentation, audit-readiness, and control validation capabilities

Analytical Strength

  • Exceptional risk analysis and problem-solving skills

  • Ability to align cybersecurity controls with business processes

  • Strong systems thinking and governance design capability

Interpersonal & Professional Skills

  • Strong executive presence and communication skills

  • Ability to present complex cybersecurity risks clearly to non-technical audiences

  • Collaborative leadership style with the ability to build cross-functional relationships

  • Growth-oriented mindset with interest in expanding advisory capabilities

Additional Requirements

  • U.S. Citizenship required

  • Ability to travel up to 30% to client sites as needed

  • Proficiency in Microsoft Office and cybersecurity reporting tools

Why Join Gross Mendelsohn?

  • Lead and grow a high-impact cybersecurity advisory capability

  • Work directly with firm leadership in a visible strategic role

  • Contribute to modernization initiatives within a respected independent firm

  • Collaborative, growth-oriented culture

  • Competitive compensation and comprehensive benefits

  • Free parking at our Locust Point/McHenry Row office

  • Hybrid flexibility is available with approval

Work Environment

This role offers flexibility to work hybrid or fully remote; however, the Director of Cybersecurity will be expected to be present at client sites or in the office as business needs require, particularly for client delivery, team leadership, and strategic initiatives.

Physical Requirements

Ability to sit for extended periods, lift up to 20 pounds, and manage physical files and documentation as needed.

Join Us

If you are a strategic and execution-driven cybersecurity leader who thrives in a collaborative, growth-oriented professional services firm and is energized by building, scaling, and protecting a high-impact practice, we encourage you to apply.

Gross Mendelsohn is an equal opportunity employer

committed to fostering a respectful and inclusive workplace.

Apply