ZipRecruiter

Log In

1

Grc Risk Analyst Jobs in Fort Washington, MD (NOW HIRING)

Team AMG

Enterprise Risk Analyst

VA · On-site

$56.52/hr

Enterprise Risk Analyst - REMOTE The experiencedRisk Analystrole executes the VA Enterprise Risk ... Experience with Governance, Risk, and Compliance (GRC) * Experience with Assessment and ...

System One

Jr. GRC Analyst

Rockville, MD · On-site

The GRC Analyst supports the administration of Information Security Governance, Risk, and Compliance programs, including policy exception management and enterprise risk register activities using ...

System One

Jr. GRC Analyst

Rockville, MD · On-site

The GRC Analyst supports the administration of Information Security Governance, Risk, and Compliance programs, including policy exception management and enterprise risk register activities using ...

next page

Showing results 1-20

All JobsGrc Risk Analyst JobsGrc Risk Analyst Jobs in Fort Washington, MD

Grc Risk Analyst information

See Fort Washington, MD salary details

$15

$41

$67

How much do grc risk analyst jobs pay per hour?

As of Aug 9, 2026, the average hourly pay for grc risk analyst in Fort Washington, MD is $41.70, according to ZipRecruiter salary data. Most workers in this role earn between $30.72 and $50.77 per hour, depending on experience, location, and employer.

What is the difference between Grc Risk Analyst vs Compliance Analyst?

AspectGrc Risk AnalystCompliance Analyst
CertificationsISO 31000, FRM, CRISCISO 19600, CCEP, CISA
Work EnvironmentRisk management teams, corporate officesRegulatory departments, corporate offices
Industry UsageFinance, banking, insurance, corporate riskFinancial services, healthcare, manufacturing
Job FocusIdentifying, assessing, and mitigating risks across enterpriseEnsuring compliance with laws and regulations

While both roles involve regulatory and risk considerations, a Grc Risk Analyst focuses on enterprise-wide risk management strategies, whereas a Compliance Analyst concentrates on adherence to specific laws and regulations. Both roles require similar certifications and often work in overlapping industries, but their core responsibilities differ in scope and focus.

What is a GRC Risk Analyst?

GRC Risk Analysts are professionals who specialize in Governance, Risk, and Compliance (GRC) within an organization. They assess and manage risks related to business operations, ensure compliance with relevant laws and regulations, and help implement policies and controls to mitigate potential threats. These analysts work closely with management to identify vulnerabilities, develop risk management strategies, and monitor the effectiveness of compliance programs. Their goal is to protect the organization from financial, legal, and reputational harm while supporting business objectives.

What are the key skills and qualifications needed to thrive as a GRC Risk Analyst?

To thrive as a GRC (Governance, Risk, and Compliance) Risk Analyst, you need a solid understanding of risk management principles, regulatory requirements, and compliance frameworks, often supported by a degree in information security, business, or a related field. Familiarity with GRC platforms (such as RSA Archer or MetricStream), risk assessment methodologies, and certifications like CRISC or CISA is highly valuable. Strong analytical thinking, attention to detail, and effective communication skills help you identify risks and convey findings to stakeholders. These skills are critical for ensuring organizational compliance, minimizing risk exposure, and supporting informed decision-making.

What are some common challenges a GRC Risk Analyst might face when implementing new risk management frameworks within an organization?

A GRC Risk Analyst often encounters challenges such as resistance to change from stakeholders, integrating new frameworks with existing processes, and ensuring consistent understanding across departments. Aligning risk management practices with organizational goals while adhering to regulatory requirements can also be complex. Success in this role requires strong communication skills, adaptability, and the ability to educate and collaborate with team members from diverse backgrounds.
What are popular job titles related to Grc Risk Analyst jobs in Fort Washington, MD? For Grc Risk Analyst jobs in Fort Washington, MD, the most frequently searched job titles are:
What job categories do people searching Grc Risk Analyst jobs in Fort Washington, MD look for? The top searched job categories for Grc Risk Analyst jobs in Fort Washington, MD are:
What cities near Fort Washington, MD are hiring for Grc Risk Analyst jobs? Cities near Fort Washington, MD with the most Grc Risk Analyst job openings:
Grc Risk Analyst jobs near you

Enterprise Risk Analyst

American Management Group, LLC (AMG)

Manassas, VA • On-site

$45.66/hr

Other

Medical, Dental, Vision, Life, Retirement, PTO

Posted 25 days ago

Job description

Position Title: Enterprise Risk Analyst - REMOTE The experienced Risk Analyst role executes the VA Enterprise Risk Analysis process using a custom ERA tool to identify key cyber security risk factors in network connected medical devices and Special Purpose Systems (e.g., building automation systems, physical security systems, operational technology). These risk factors are summarized, evaluated, and reported using quantitative and qualitative scores to provide a VA authorizing official with awareness of the residual cyber risk prior to connecting these devices to the VA network. The Risk Analyst must acquire, review and leverage system documentation and data gathered through questionnaires and interviews with customers in the field and vendor/manufacturer representatives to accurately document critical security posture elements in a common reporting format. These elements include hardware/software inventory, communications profile, system interconnections, data types and stores, and the presence or lack of security controls, settings and mechanisms for a given device type. The Risk Analyst performs annual reviews to support effective continuous monitoring and to ensure documented residual risks are current, accurate, and complete. The analyst works within a Risk Management team and is expected to collaborate with Federal and contractor team mates to achieve best outcomes for the ERA process. You Have: Experience with Cybersecurity, risk management, or risk assessment for complex systems Experience with NIST SP 800-53 and NIST SP 800-30 Experience with documenting and depicting network topology and network protocols Ability to engage directly with clients, and third parties to facilitate enterprise risk analysis Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements Bachelor’s degree in Computer Science, Mathematics, Engineering or technical discipline and 10 years of relevant work experience or 18 years of relevant work experience in lieu of degree Nice If You Have: Experience with cybersecurity analysis of medical technology or Internet of Things (IoT) Experience with Governance, Risk, and Compliance (GRC) Experience with Assessment and Authorization (A&A) and eMASS Experience with Excel and Visio CompTIA Security+ or Certified Risk Management Professional (CRISC) or Certified in Risk and Information Systems Control (CRISC) Public Trust clearance Hourly rate of pay: $45.66 Benefits: PTO, Medical/Vision/Dental plan, Life and AD&D insurance, 401K plan We are an Equal Opportunity Employer: We do not discriminate in employment opportunities or practices on the basis of race, color, religion, sex, national origin, age, disability, genetic information or any other characteristics protected by law.  This organization participates in E-Verify. #DICE

Apply