ZipRecruiter

Log In

1

Grc Sales Jobs (NOW HIRING)

Vanta

Product GRC SME

$171K - $201K/yr

The GRC Subject Matter Experts play a critical role in delivering high-quality, scalable content ... Acting as a bridge between Product Management, Engineering, Design, Sales, and Customer Success ...

Pallet

Founding GRC Lead

San Francisco, CA · On-site

$175K - $225K/yr

You'll sit in on customer conversations, own the trust narrative, and directly unblock sales. * Full-spectrum scope. Most GRC roles silo you into audit or privacy or vendor risk. Here you own all of ...

Bloom Energy

Sr. Manager GRC

San Jose, CA

Support sales by timely filling out security questionnaires. * Compliance :Ensure adherence to ... Lead and mentor the GRC team, foster a culture of compliance, and drive strategic GRC initiatives.

Profound

Security GRC Specialist

Manhattan, NY · On-site

$230K - $275K/yr

Partner with Sales and Customer Success to unblock deals and build trust with security teams at ... Evaluate and implement GRC and security tooling where it earns its keep Who you are * 7+ years in ...

Bloom Energy

Sr. Manager GRC

San Jose, CA · On-site

Support sales by timely filling out security questionnaires. * Compliance : Ensure adherence to ... Lead and mentor the GRC team, foster a culture of compliance, and drive strategic GRC initiatives.

Gong.io

$121K - $185K/yr

As our Senior GRC Security Lead, you will be the architect of foundational programs we are building ... You will work directly with Legal, Sales, Engineering, Customer Audit teams, and executive ...

The Cason Group

GRC Analyst

Columbia, SC · Hybrid

$65K - $80K/yr

The Cason Group serves insurance professionals by delivering creative sales and service solutions ... GRC Analyst Division: Infrastructure/ IT Location: Columbia, SC Type : Full-Time; May be eligible ...

Profound

Security GRC Specialist

New York, NY · On-site

$230K - $275K/yr

Partner with Sales and Customer Success to unblock deals and build trust with security teams at ... Evaluate and implement GRC and security tooling where it earns its keep Who you are * 7+ years in ...

Workiva Inc.

Product Marketing Director, GRC

Denver, CO · On-site +1

Create and maintain sales assets and enablement materials--including first-call decks, solution ... GRC Experience: Direct experience marketing risk, audit, or compliance solutions, with a strong ...

Workiva, Inc.

Product Marketing Director, GRC

Create and maintain sales assets and enablement materials-including first-call decks, solution ... GRC Experience: Direct experience marketing risk, audit, or compliance solutions, with a strong ...

CoStar

Associate GRC Analyst

Richmond, VA

$76K - $102K/yr

Associate GRC Analyst Overview CoStar Group (NASDAQ: CSGP) is a leading global provider of ... Finance, and Sales. This position is located in Richmond, VA and is in office Monday through ...

Comcast

Cyber GRC Solutions Consultant

PA · On-site

$96K/mo

We're hiring an enterprise sales engineer to lead the technical aspects of the sales cycles and ... Experience selling into or supporting GRC, security compliance, cyber risk, or security reporting ...

CoStar Group

Associate GRC Analyst

Richmond, VA · On-site

$76K - $102K/yr

Associate GRC Analyst Overview CoStar Group (NASDAQ: CSGP) is a leading global provider of ... Finance, and Sales. This position is located in Richmond, VA and is in office Monday through ...

Kokosing

Senior GRC Analyst

Westerville, OH · On-site

$92K - $121K/yr

With over $2.8 billion in annual sales and a commitment to its workforce, Kokosing is the winning team. We are looking for a Security Governance, Risk, and Compliance (GRC) Analyst to support and ...

previous pagenext page

Showing results 21-40

All JobsGrc Sales Jobs

Grc Sales information

See salary details

$22.5K

$81.6K

$154.5K

How much do grc sales jobs pay per year?

As of Aug 6, 2026, the average yearly pay for grc sales in the United States is $81,617.00, according to ZipRecruiter salary data. Most workers in this role earn between $53,000.00 and $96,500.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a GRC Sales professional?

To excel as a GRC (Governance, Risk, and Compliance) Sales professional, you need a solid understanding of risk management principles, compliance frameworks, and proven experience in B2B sales, often supported by a bachelor's degree in business or a related field. Familiarity with GRC platforms (such as RSA Archer, MetricStream, or LogicGate), CRM tools like Salesforce, and sometimes relevant certifications (e.g., CISA, CRISC) is highly valuable. Exceptional communication, negotiation, and relationship-building skills help differentiate top performers in this role. These competencies are crucial for effectively conveying complex solutions to clients, building trust, and driving revenue growth in a competitive market.

What is a GRC Sales?

A GRC Sales role involves selling Governance, Risk, and Compliance (GRC) solutions to organizations. Professionals in this role work with clients to understand their compliance needs, demonstrate how GRC platforms can streamline risk management, and ultimately drive sales of software or services. They often collaborate with technical teams to tailor solutions and provide ongoing support, aiming to help businesses effectively manage regulatory requirements and reduce risk.

What are some common challenges faced by GRC Sales professionals, and how can they be addressed?

GRC (Governance, Risk, and Compliance) Sales professionals often encounter challenges such as navigating complex regulatory landscapes, aligning solutions with clients' unique compliance needs, and building trust with risk-averse decision-makers. Addressing these requires staying up-to-date on industry regulations, developing a consultative approach to understand client pain points, and collaborating closely with product and compliance teams to tailor offerings. Building long-term relationships and demonstrating value through case studies and ROI can also help overcome hesitancy, making continuous learning and adaptability essential in this role.

Is GRC a good career?

GRC (Governance, Risk, and Compliance) is a growing field within cybersecurity and risk management, offering opportunities in industries such as finance, healthcare, and technology. It typically requires knowledge of regulations, policies, and security frameworks, and can lead to roles with stable employment and advancement potential.

Is it hard to get a GRC sales job?

GRC sales jobs can be competitive and often require knowledge of governance, risk management, and compliance, along with strong sales skills. Relevant certifications and experience in cybersecurity or regulatory environments can improve chances of securing such roles, which may also involve understanding specific tools and client needs.

What is the difference between Grc Sales vs Grc Analyst?

AspectGrc SalesGrc Analyst
Required CredentialsSales certifications, knowledge of GRC solutionsCertifications in risk management, compliance, or auditing
Work EnvironmentClient-facing, sales-focusedAnalytical, compliance-focused
Employer & Industry UsageTechnology, consulting, security firmsFinancial institutions, consulting, corporate compliance
Common Search & ComparisonYesNo

Grc Sales primarily focuses on selling GRC solutions to clients, requiring sales skills and industry knowledge. Grc Analysts analyze compliance and risk data to support organizational governance. While both roles involve GRC concepts, Grc Sales emphasizes client engagement and revenue generation, whereas Grc Analysts concentrate on risk assessment and compliance analysis.

More about Grc Sales jobs
What cities are hiring for Grc Sales jobs? Cities with the most Grc Sales job openings:
What states have the most Grc Sales jobs? States with the most job openings for Grc Sales jobs include:
What job categories do people searching Grc Sales jobs look for? The top searched job categories for Grc Sales jobs are:
Grc Sales jobs near you
Infographic showing various Grc Sales job openings in the United States as of August 2026, with employment types broken down into 100% Full Time. Highlights an 82% In-person, 9% Hybrid, and 9% Remote job distribution, with an average salary of $81,617 per year, or $39.2 per hour.

Product GRC SME

Vanta

Remote

$171K - $201K/yr

Full-time

Medical, Dental, Vision, Retirement, PTO

Re-posted 22 days ago

Job description

At Vanta, our mission is to help businesses earn and prove trust.We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it.
As Vanta rapidly grows and moves upmarket, we're working with increasingly sophisticated customers who have complex security and compliance needs across a wide range of industries and geographies. The GRC Subject Matter Experts play a critical role in delivering high-quality, scalable content and product guidance to help these companies effectively manage their GRC programs.
As Vanta's newest GRC Subject Matter Expert, you'll be responsible for developing and maintaining multi-framework GRC solutions used by thousands of customers. Acting as a bridge between Product Management, Engineering, Design, Sales, and Customer Success, you'll ensure our solutions align with key security, privacy, and risk frameworks and real-world customer needs. You'll play a pivotal role in designing, validating, and improving compliance-related content and capabilities while providing strategic input to shape Vanta's GRC product roadmap.
You'll join Vanta's Security organization, which provides essential security operational services, is directly involved in the software development process, sets policies and standards regarding enterprise-wide security requirements, and offers advisory services to enable our business to thrive while effectively managing risk. If you're someone who has high initiative and enjoys solving complex problems with real customer impact, we'd love to hear from you!
What you'll do as a GRC SME at Vanta:
  • Build and maintain compliance frameworks - Lead the creation, enhancement, and lifecycle management of controls, evidence requirements, and implementation guidance for standards such as SOC 2, ISO/IEC 27001 & 27701, HIPAA, PCI DSS, NIST CSF, NIST SP 800-53, and regional regulations (e.g., GDPR/CCPA). Author clear control rationales, acceptance criteria, and customer-facing guidance.
  • Design crosswalks and mappings (framework‑agnostic) - Create and steward an internal common‑control approach informed by industry catalogs (e.g., SCF, UCF, or similar). Maintain bidirectional crosswalks across industry leading security and privacy regulatory frameworks. Define canonical control IDs, mapping confidence, and evidence data dictionaries; version crosswalks with changelogs and traceability to source authority. Partner with Engineering to operationalize mappings in‑product (integrations, automated tests, exceptions/exemptions, continuous monitoring workflows).
  • Elevate content quality and usability - Define standards for control wording, evidence specificity, testing method, and reviewer guidance. Establish content QA processes, audits, and metrics (e.g., adoption, time-to-evidence, completion rates) to continually improve outcomes.
  • Drive end‑to‑end GRC product enablement - Build modular content, guidance, and templates for risk management (methodologies, scoring, KRIs), issue & corrective action management (POA&M), policy management (lifecycle, attestations), access reviews (SoD, recertification flows), customer trust / Trust Center artifacts, and third‑party risk management (TPRM) (due diligence, monitoring, contract clauses).
  • Act as a product advisor across discovery & design - Partner with PM/Design to support feature discovery (customer interviews, JTBD, task analysis), review UI/UX for control, evidence, and review workflows, run usability tests, and author PRDs/acceptance criteria grounded in auditor and customer needs.
  • Author automated tests & continuous monitoring - Translate controls/compliance knowledge and infrastructure contexts (cloud services, SaaS apps, on‑prem, endpoints, networks, CI/CD) into spec‑level automated tests and detectors in Vanta. Define test logic, data sources/integrations (APIs, logs, configs), edge cases, and acceptance criteria; pair with Engineering to implement, validate, and maintain detectors with versioned mappings to frameworks for continuous monitoring.
  • Partner with Product to drive roadmap - Translate customer and market needs into GRC requirements, propose experiments, and validate solutions through discovery with Design/UX Research. Influence prioritization using data and field insights; own a backlog for framework/content improvements.
  • Enable AI‑assisted compliance - Partner with Engineering/ML to design and ship LLM‑powered guidance and automation. Translate SME knowledge into machine‑readable specs (schemas, ontologies, prompts), define gold‑standard evaluation sets and acceptance criteria, and implement quality/safety guardrails (red‑teaming, refusal policy, privacy controls). Instrument features to monitor accuracy and drift in production.
  • Synthesize feedback loops - Analyze input from customers, auditors/assessors, partners, and internal teams to identify gaps, resolve issues, and deliver iterative updates quickly and safely.

How to be successful in this role:
  • Experience - 5-7+ years in GRC and/or Information Security with hands‑on implementation or assessment across multiple frameworks (e.g., SOC 2, ISO 27001/27701, HIPAA, PCI DSS, NIST CSF/800‑53). Experience with cloud environments and SaaS is strongly preferred. Federal experience (e.g., FedRAMP) is a plus but not required.
  • Education (preferred) - Bachelor's degree in Computer Science; advanced degree a plus.
  • GRC craft - Deep understanding of controls, risks, testing approaches, evidence standards, and program operations (policies, risk registers, issues/POA&M management, vendor risk, continuous monitoring).
  • Product mindset - Ability to translate requirements into productizable capabilities; comfort with experimentation and data‑driven prioritization.
  • Technical & automation (AI‑augmented) - Build leverage with lightweight tools, LLMs, and automation workflows:
  • Use AI pair‑programming tools (e.g., GitHub Copilot, Cursor) to accelerate drafting of specs, mappings, queries, and test logic.
  • Own simple automations that stitch together Sheets/Airtable, APIs, and webhooks to remove toil (e.g., mapping QA, evidence normalization, exception routing).
  • Design AI‑augmented workflows across teams (e.g., LLM‑assisted control guidance, assessor Q&A triage, remediation suggestions) and measure outcomes (precision/recall, time‑to‑evidence, FP/FN rates).
  • Establish safe‑use guidelines and reusable patterns for prompts/agents (versioning, evaluation, privacy) and enable adoption with playbooks and templates.
  • Analytical & detail‑oriented - Skilled at precise control wording, mapping accuracy, and evidence specificity; comfortable working in spreadsheets and large data sets (lookups, pivots).
  • Communication & collaboration - Excellent written and verbal skills; able to partner effectively with engineers, designers, GTM teams, auditors, and customers.
  • Self-motivated and independent - Able to work autonomously while contributing to team success.
  • Helpful and resourceful - Willing & excited to support cross-functional teams and improve compliance content.
  • Adaptable in a fast-paced environment - Skilled at managing change, solving problems proactively, and taking initiative.
  • Nice‑to‑have - Experience with privacy regulations (GDPR/CCPA), risk quantification (e.g., FAIR), audit/assessor background, or B2B SaaS content/enablement.
  • Certifications (preferred, not required) - One or more of: CISA, CISSP, CCSK/CCSK+, ISO 27001 Lead Implementer/Lead Auditor, CIPM/CIPT, PCI‑ISA/QSA.
  • Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact

What you can expect as a Vanta'n:
  • Industry-competitive salary and equity
  • Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans
  • 16 weeks paid Parental Leave for all new parents
  • Health & wellness stipend
  • Remote workspace, internet, and cellphone stipend
  • Commuter benefits for team members who report to the SF and NYC office
  • Family planning benefits
  • Matching 401(k) contribution with immediate vesting
  • Flexible PTO policy, plus 80 hours of Sick Time
  • 11 company-paid holidays
  • Virtual team building activities, lunch and learns, and other company-wide events!
  • Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney

To provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors and may vary based on candidate location, skills, depth of work experience, and relevant licenses/credentials.
#LI-remote
At Vanta, we are committed to hiring diverse talent of different backgrounds and as such, it is important to us to provide an inclusive work environment for all. We do not discriminate on the basis of race, gender identity, age, religion, sexual orientation, veteran or disability status, or any other protected class. As an equal opportunity employer, we encourage and welcome people of all backgrounds to apply.
About Vanta
We started in 2018, in the wake of several high-profile data breaches. Online security was only becoming more important, but we knew firsthand how hard it could be for fast-growing companies to invest the time and manpower it takes to build a solid security foundation. Vanta was inspired by a vision to restore trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged.
Now more than ever, making security continuous-not just a point-in-time check- is essential. Thousands of companies rely on Vanta to build, maintain and demonstrate their trust- all in a way that's real-time and transparent.
Referral Instructions
If you are being referred for the role, please contact that person to apply on your behalf.

Apply