ZipRecruiter

Log In

1

Information Security Grc Jobs (NOW HIRING)

next page

Showing results 1-20

All JobsInformation Security Grc Jobs

Information Security Grc information

See salary details

$68K

$126.8K

$191.5K

How much do information security grc jobs pay per year?

As of Sep 6, 2026, the average yearly pay for information security grc in the United States is $126,833.00, according to ZipRecruiter salary data. Most workers in this role earn between $105,000.00 and $145,000.00 per year, depending on experience, location, and employer.

What is an information security GRC?

An Information Security GRC (Governance, Risk, and Compliance) job focuses on ensuring that an organization's security policies, risk management strategies, and regulatory compliance align with industry standards and legal requirements. Professionals in this role assess security risks, implement controls, and develop frameworks to maintain data protection and regulatory adherence. They collaborate with different teams to enforce compliance, conduct audits, and manage security governance. This role is critical in preventing security breaches, ensuring legal compliance, and maintaining customer trust.

What does an information security GRC do?

As an Information Security GRC professional, your daily responsibilities often include conducting risk assessments, monitoring compliance with internal policies and external regulations, and supporting audits. You may review and update governance documentation, communicate risks or compliance issues to stakeholders, and collaborate with IT, legal, and business teams to ensure information security best practices are followed. Additionally, you'll stay current with changes in laws and regulations to maintain the organization's overall security posture. The work is both analytical and collaborative, requiring you to balance technical tasks with effective communication and project management.

What are the key skills and qualifications needed to thrive in the information security GRC position?

To thrive as an Information Security GRC professional, you need a strong understanding of information security principles, risk management frameworks, compliance regulations, and policy development, often supported by a degree in information security or a related field. Familiarity with tools such as GRC platforms (e.g., Archer, ServiceNow), risk assessment software, and certifications like CISSP, CISA, or CRISC is highly valuable. Exceptional analytical thinking, attention to detail, and strong communication skills are important soft skills in this role. These competencies enable you to navigate complex regulatory landscapes, collaborate across teams, and effectively protect an organization's information assets.

Is information security GRC a good career?

Information Security GRC (Governance, Risk, and Compliance) is a growing field that offers opportunities in managing organizational security policies, risk assessments, and compliance frameworks. It typically requires knowledge of security standards, regulations, and tools like audit software, making it suitable for professionals with a background in cybersecurity or IT governance. The role often provides stable employment with increasing demand across various industries.

Is information security GRC an entry level job?

Information Security GRC (Governance, Risk, and Compliance) roles are often entry-level or require minimal experience, especially for positions focused on policy, compliance, and risk assessment. However, more advanced GRC roles may require relevant certifications like CISSP or CISA and several years of experience in security or compliance fields.
More about Information Security Grc jobs

What cities are hiring for Information Security Grc jobs?

Cities with the most Information Security Grc job openings:

What states have the most Information Security Grc jobs?

States with the most job openings for Information Security Grc jobs include:

What job categories do people searching Information Security Grc jobs look for?

The top searched job categories for Information Security Grc jobs are:

Information Security Grc jobs near you
Infographic showing various Information Security Grc job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 74% Full Time, 23% Part Time, and 2% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $126,833 per year, or $61 per hour.

Information Security GRC Manager

Signet Jewelers Limited

Akron, OH • On-site

$100 - $140/hr

Other

Medical, Dental, Vision, Retirement

Posted 4 days ago

Signet Jewelers rating

6.9

Company rating: 6.9 out of 10

Based on 301 frontline employees who took The Breakroom Quiz

16th of 30 rated jewelry retailers

Job description

Overview

Information Security GRC Manager — Location: Dallas, TX or Akron, OH (Hybrid); Open to remote.

We are seeking an experienced Information Security GRC Manager to lead our governance, risk, and compliance (GRC) program. This role is critical in ensuring our information security practices align with regulatory requirements, industry standards, and business objectives. As a key member of the security leadership team, you will drive enterprise risk management, oversee compliance initiatives, and provide clear, actionable insights on our security posture to senior leadership.

Responsibilities
  • Lead Governance & Security Programs: Develop and maintain the enterprise information security governance framework; Establish and lead cross-functional governance forums (e.g., compliance working groups, risk committees); Oversee security policies, standards, procedures, and risk methodologies.
  • Drive Risk Management: Lead enterprise-wide risk assessments, including identification, analysis, and mitigation of security risks; Define, track, and report on Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs); Partner with stakeholders to support risk-based decision-making; Own Compliance & Certifications: Plan and execute compliance and readiness assessments (e.g., PCI-DSS, NIST CSF, ISO 27001); Serve as the primary liaison for external auditors and assessors; Ensure ongoing adherence to regulatory and contractual requirements.
  • Manage Audit & Assurance Activities: Coordinate internal and external audits, including SOX-related controls where applicable; Oversee remediation tracking and ensure timely resolution of findings; Continuously improve control effectiveness and assurance processes.
  • Partner Across the Business: Collaborate with IT, Legal, Privacy, and business teams to embed security into operations; Translate complex security and compliance requirements into business-friendly language; Provide regular reporting on risk posture and compliance to senior leadership.
  • Promote Security Awareness: Develop and deliver training and awareness programs related to risk and compliance; Foster a culture of security and accountability across the organization.
Position Qualifications
  • Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Business, or related field (Master’s preferred).
  • 10+ years of experience in information security, IT risk, or compliance.
  • 2–3+ years of hands-on experience in a GRC-focused role.
  • Strong knowledge of frameworks and standards (e.g., NIST, ISO 27001, COBIT).
  • Experience managing audits and working with external regulators or assessors.
  • Excellent communication skills, with the ability to engage both technical and business stakeholders.
  • Strong project management skills and ability to manage multiple initiatives simultaneously.
  • Nice to Have: Relevant certifications (e.g., CISSP, CISM, CRISC, CISA); Experience with SOX ITGC controls and audit coordination; Familiarity with third-party/vendor risk management programs; Experience with GRC tools (e.g., Optro (AuditBoard), ServiceNow GRC, OneTrust).
Benefits & Perks
  • Competitive healthcare, dental & vision insurance
  • 401(k) matching after one year of employment
  • Generous time off + company holidays
  • Merchandise discount
  • Learning & Development programs
  • Much more

Signet Jewelers is a people-first company. This core value is at the heart of everything we do, from empowering our valued team members, to collaborating with our customers, to fostering the communities in which we live and serve. We\'re ONE Company, proud of our rich heritage, international presence, diversity, inclusion and equity we’re inspiring inside. We are Great Place to Work-Certified™ operating under the iconic brands: Kay Jewelers, Zales, Jared Jewelry, H.Samuel, Ernest Jones, Peoples, Banter by Piercing Pagoda and James Allen.

#J-18808-Ljbffr

What Signet Jewelers employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Signet Jewelers logo

About Signet Jewelers

Sourced by ZipRecruiter

At Kay, we know that love is unstoppable. Which is why we're devoted to helping customers Celebrate Life and Express Love in ways every bit as dynamic as they are memorable. From classic must-haves to the latest trends, our selection of quality, responsibly-sourced jewelry has become part of so many love stories over the last century. Kay Jewelers is part of Signet Jewelers, a purpose-driven company who believes love inspires love. Signet is also "Great Place to Work-Certified"™. There are dynamic career paths awaiting you - rewarding opportunities to impact the lives of others and inspire love. Join us!

Industry

Retail

Company size

10,000+ Employees

Headquarters location

Akron, OH, US

Year founded

1949

Social media

Twitter

View All Signet Jewelers Jobs

Apply