ZipRecruiter

Log In

1

Information Security Grc Jobs (NOW HIRING)

next page

Showing results 1-20

All JobsInformation Security Grc Jobs

Information Security Grc information

See salary details

$68K

$126.8K

$191.5K

How much do information security grc jobs pay per year?

As of Jun 15, 2026, the average yearly pay for information security grc in the United States is $126,833.00, according to ZipRecruiter salary data. Most workers in this role earn between $105,000.00 and $145,000.00 per year, depending on experience, location, and employer.

What is GRC in information security?

GRC in information security stands for Governance, Risk Management, and Compliance. It is a framework that helps organizations align security strategies with business objectives, manage risks effectively, and ensure adherence to regulations through policies, procedures, and tools. Professionals in this field often work with standards like ISO 27001 and frameworks such as NIST.

Is GRC an entry level job?

An Information Security GRC (Governance, Risk, and Compliance) role is typically not entry-level and often requires prior experience or knowledge of cybersecurity principles, risk management, and compliance frameworks. Entry-level positions in GRC may be available for candidates with relevant certifications or internships, but more advanced roles usually demand several years of related experience. Skills in policy development, audit processes, and familiarity with tools like GRC software are also important for higher-level positions.

Can you make $500,000 a year in cyber security?

Information Security GRC professionals can potentially earn $500,000 annually with extensive experience, advanced certifications like CISSP or CISA, and leadership roles such as Chief Information Security Officer. High salaries are typically associated with senior positions, large organizations, or consulting roles that require specialized skills and strategic oversight.

What are the typical daily responsibilities of an Information Security GRC professional?

As an Information Security GRC professional, your daily responsibilities often include conducting risk assessments, monitoring compliance with internal policies and external regulations, and supporting audits. You may review and update governance documentation, communicate risks or compliance issues to stakeholders, and collaborate with IT, legal, and business teams to ensure information security best practices are followed. Additionally, you'll stay current with changes in laws and regulations to maintain the organization's overall security posture. The work is both analytical and collaborative, requiring you to balance technical tasks with effective communication and project management.

What are the key skills and qualifications needed to thrive in the Information Security Grc position, and why are they important?

To thrive as an Information Security GRC professional, you need a strong understanding of information security principles, risk management frameworks, compliance regulations, and policy development, often supported by a degree in information security or a related field. Familiarity with tools such as GRC platforms (e.g., Archer, ServiceNow), risk assessment software, and certifications like CISSP, CISA, or CRISC is highly valuable. Exceptional analytical thinking, attention to detail, and strong communication skills are important soft skills in this role. These competencies enable you to navigate complex regulatory landscapes, collaborate across teams, and effectively protect an organization's information assets.

Is GRC high paying?

Information Security GRC (Governance, Risk, and Compliance) roles are generally well-paying within the cybersecurity field, often reflecting the level of responsibility, certifications like CISSP or CISM, and experience. Salaries can vary based on industry, location, and company size but tend to be competitive compared to other cybersecurity positions.

What is an Information Security GRC job?

An Information Security GRC (Governance, Risk, and Compliance) job focuses on ensuring that an organization's security policies, risk management strategies, and regulatory compliance align with industry standards and legal requirements. Professionals in this role assess security risks, implement controls, and develop frameworks to maintain data protection and regulatory adherence. They collaborate with different teams to enforce compliance, conduct audits, and manage security governance. This role is critical in preventing security breaches, ensuring legal compliance, and maintaining customer trust.

More about Information Security Grc jobs
What cities are hiring for Information Security Grc jobs? Cities with the most Information Security Grc job openings:
What states have the most Information Security Grc jobs? States with the most job openings for Information Security Grc jobs include:
What job categories do people searching Information Security Grc jobs look for? The top searched job categories for Information Security Grc jobs are:
Information Security Grc jobs near you
Information Security GRC Manager

Information Security GRC Manager

Signet Jewelers Ltd.

Akron, OH • On-site, Remote

Full-time

Medical, Dental, Vision, Retirement

Posted 20 days ago

Signet Jewelers rating

6.8

Company rating: 6.8 out of 10

Based on 292 frontline employees who took The Breakroom Quiz

17th of 28 rated jewelry retailers

Job description

We have many opportunities available on our other career site pages. Click here to link to our careers page!

Signet Jewelers is the world's largest retailer of diamond jewelry, operating more than 2,800 stores worldwide under the iconic brands: Kay Jewelers, Zales, Jared, H.Samuel, Ernest Jones, Peoples, Banter by Piercing Pagoda, Rocksbox, JamesAllen.com and Diamonds Direct. We are a people-first company and this core value is at the heart of everything we do, from empowering our valued team members, to collaborating with our customers, to fostering the communities in which we live and serve. People - and the love their actions inspire - are what drive us. We're not only proud of the love we inspire outside our walls, we're especially proud of the diversity, inclusion and equity we're inspiring inside. There are dynamic career paths awaiting you - rewarding opportunities to impact the lives of others and inspire love. Join us!

Information Security GRC Manager

Location: Dallas, TX or Akron, OH (Hybrid) Preferred

Open to remote

POSITION SUMMARY:

We are seeking an experiencedInformation Security GRC Managerto lead our governance, risk, and compliance (GRC) program. This role is critical in ensuring our information security practices align with regulatory requirements, industry standards, and business objectives.

As a key member of the security leadership team, you will drive enterprise risk management, oversee compliance initiatives, and provide clear, actionable insights on our security posture to senior leadership.

RESPONSIBILITIES:

Lead Governance & Security Programs

  • Develop and maintain the enterprise information security governance framework
  • Establish and lead cross-functional governance forums (e.g., compliance working groups, risk committees)
  • Oversee security policies, standards, procedures, and risk methodologies

Drive Risk Management

  • Lead enterprise-wide risk assessments, including identification, analysis, and mitigation of security risks
  • Define, track, and report on Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs)
  • Partner with stakeholders to support risk-based decision-making

Own Compliance & Certifications

  • Plan and execute compliance and readiness assessments (e.g., PCI-DSS, NIST CSF, ISO 27001)
  • Serve as the primary liaison for external auditors and assessors
  • Ensure ongoing adherence to regulatory and contractual requirements

Manage Audit & Assurance Activities

  • Coordinate internal and external audits, including SOX-related controls where applicable
  • Oversee remediation tracking and ensure timely resolution of findings
  • Continuously improve control effectiveness and assurance processes

Partner Across the Business

  • Collaborate with IT, Legal, Privacy, and business teams to embed security into operations
  • Translate complex security and compliance requirements into business-friendly language
  • Provide regular reporting on risk posture and compliance to senior leadership

Promote Security Awareness

  • Develop and deliver training and awareness programs related to risk and compliance
  • Foster a culture of security and accountability across the organization

POSITION QUALIFICATIONS:

  • Bachelor's degree in Information Security, Cybersecurity, Computer Science, Business, or related field (Master's preferred)
  • 10+ years of experience in information security, IT risk, or compliance
  • 2-3+ years of hands-on experience in a GRC-focused role
  • Strong knowledge of frameworks and standards (e.g., NIST, ISO 27001, COBIT)
  • Experience managing audits and working with external regulators or assessors
  • Excellent communication skills, with the ability to engage both technical and business stakeholders
  • Strong project management skills and ability to manage multiple initiatives simultaneously

Nice to Have:

  • Relevant certifications (e.g., CISSP, CISM, CRISC, CISA)
  • Experience with SOX ITGC controls and audit coordination
  • Familiarity with third-party/vendor risk management programs
  • Experience with GRC tools (e.g., Optro (AuditBoard), ServiceNow GRC, OneTrust)

BENEFITS & PERKS:

  • Competitive healthcare, dental & vision insurance
  • 401(k) matching after one year of employment
  • Generous time off + company holidays
  • Merchandise discount
  • Learning & Development programs
  • Much more!

What Signet Jewelers employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Signet Jewelers logo

About Signet Jewelers

Sourced by ZipRecruiter

At Kay, we know that love is unstoppable. Which is why we're devoted to helping customers Celebrate Life and Express Love in ways every bit as dynamic as they are memorable. From classic must-haves to the latest trends, our selection of quality, responsibly-sourced jewelry has become part of so many love stories over the last century. Kay Jewelers is part of Signet Jewelers, a purpose-driven company who believes love inspires love. Signet is also "Great Place to Work-Certified"™. There are dynamic career paths awaiting you - rewarding opportunities to impact the lives of others and inspire love. Join us!

Industry

Retail

Company size

10,000+ Employees

Headquarters location

Akron, OH, US

Year founded

1949

Social media

Twitter

View All Signet Jewelers Jobs

Apply