ZipRecruiter

Log In

1

Information Security Grc Jobs (NOW HIRING)

Scigon Solutions

GRC Specialist II

Chicago, IL · On-site

$116K - $144K/yr

GRC Specialist II Salary: $116,000-$144,000 As a Security GRC Specialist II , you'll be a key ... Serve as an Information Security subject matter expert, advising technical and non-technical ...

Judge Group, Inc.

Manager, IT Security, GRC

Burlington, NJ · On-site

$150K - $175K/yr

Our client is currently seeking a Manager, IT Security, GRC. This is FT perm role and hybrid in Burlington, NJ Position Overview The Manager of Governance, Risk and Compliance (GRC) plays a critical ...

Socket.dev

Head of Information Security

Belgrade, MT · On-site

$120 - $180/hr

Lead the GRC function and manage the Information Security team. * Drive information security governance across the organization. * Lead and support international audits, including ISO 27001, PCI DSS ...

Gong.io

Senior Security GRC Lead

Manhattan, NY · On-site

Senior Security GRC Lead Austin | Chicago | New York City | Salt Lake City | San Francisco Gong ... For more information, visit gong.io. At Gong, you will join a company built on innovative products ...

previous pagenext page

Showing results 21-40

All JobsInformation Security Grc Jobs

Information Security Grc information

See salary details

$68K

$126.8K

$191.5K

How much do information security grc jobs pay per year?

As of Aug 28, 2026, the average yearly pay for information security grc in the United States is $126,833.00, according to ZipRecruiter salary data. Most workers in this role earn between $105,000.00 and $145,000.00 per year, depending on experience, location, and employer.

What is an information security GRC?

An Information Security GRC (Governance, Risk, and Compliance) job focuses on ensuring that an organization's security policies, risk management strategies, and regulatory compliance align with industry standards and legal requirements. Professionals in this role assess security risks, implement controls, and develop frameworks to maintain data protection and regulatory adherence. They collaborate with different teams to enforce compliance, conduct audits, and manage security governance. This role is critical in preventing security breaches, ensuring legal compliance, and maintaining customer trust.

What does an information security GRC do?

As an Information Security GRC professional, your daily responsibilities often include conducting risk assessments, monitoring compliance with internal policies and external regulations, and supporting audits. You may review and update governance documentation, communicate risks or compliance issues to stakeholders, and collaborate with IT, legal, and business teams to ensure information security best practices are followed. Additionally, you'll stay current with changes in laws and regulations to maintain the organization's overall security posture. The work is both analytical and collaborative, requiring you to balance technical tasks with effective communication and project management.

What are the key skills and qualifications needed to thrive in the information security GRC position?

To thrive as an Information Security GRC professional, you need a strong understanding of information security principles, risk management frameworks, compliance regulations, and policy development, often supported by a degree in information security or a related field. Familiarity with tools such as GRC platforms (e.g., Archer, ServiceNow), risk assessment software, and certifications like CISSP, CISA, or CRISC is highly valuable. Exceptional analytical thinking, attention to detail, and strong communication skills are important soft skills in this role. These competencies enable you to navigate complex regulatory landscapes, collaborate across teams, and effectively protect an organization's information assets.

Is information security GRC a good career?

Information Security GRC (Governance, Risk, and Compliance) is a growing field that offers opportunities in managing organizational security policies, risk assessments, and compliance frameworks. It typically requires knowledge of security standards, regulations, and tools like audit software, making it suitable for professionals with a background in cybersecurity or IT governance. The role often provides stable employment with increasing demand across various industries.

Is information security GRC an entry level job?

Information Security GRC (Governance, Risk, and Compliance) roles are often entry-level or require minimal experience, especially for positions focused on policy, compliance, and risk assessment. However, more advanced GRC roles may require relevant certifications like CISSP or CISA and several years of experience in security or compliance fields.
More about Information Security Grc jobs

What cities are hiring for Information Security Grc jobs?

Cities with the most Information Security Grc job openings:

What states have the most Information Security Grc jobs?

States with the most job openings for Information Security Grc jobs include:

What job categories do people searching Information Security Grc jobs look for?

The top searched job categories for Information Security Grc jobs are:

Information Security Grc jobs near you
Infographic showing various Information Security Grc job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 73% Full Time, 23% Part Time, and 3% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $126,833 per year, or $61 per hour.

Manager, Information Security GRC

Columbus, OH • On-site

Sutton Bank
Commercial Banking • 51 - 200 employees
Learn more about Sutton Bankexternal

Full-time

Posted 10 days ago

Job description

Summary:
The Information Security Governance, Risk, and Compliance (GRC) Manager is responsible for leading the development, implementation, and ongoing management of the organization's security governance framework. Responsible for the oversight of risk management activities, ensures compliance with applicable regulations and standards, and drives continuous improvement in the security program. The GRC Manager partners closely with technology, legal, audit, and business stakeholders to embed security into operations and support strategic objectives.
Qualifications:
Education: Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, or related field. Master's Degree preferred.
Licenses/Certifications: Valid Driver's License, CISSP, CISA or CRISC.
Preferred: Relevant certifications such as CompTIA Security+, Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) or similar credentials.
Experience: Seven or more years of combined experience in information security, IT or risk management, preferably in a financial institution. Experience leading a team. Or equivalent combination of education and experience.
Essential Functions:
A: Job Specific:
  • Designs and executes end-to-end risk assessments that include internal, third party and fourth party vendors, identifying high-impact vulnerabilities, threats, and business risk across the enterprise.
  • Oversees compliance with security policies, industry standards, and regulations (e.g., NIST CSF, HIPAA, NIST 800-53, PCI-DSS, GDPR, GLBA or ISO 27001).
  • Develops and updates security policies, standards, and procedures to address evolving risk and regulatory requirements.
  • Leads audit preparation and response efforts, managing interactions with external auditors and ensuring timely resolution of findings.
  • Leads investigations into security incidents, performing detailed root cause analysis and impact assessments.
  • Designs and implements advanced security metrics and key risk indicators (KRIs) to measure and communicate risk posture.
  • Acts as a trusted advisor to senior management, providing insights on risk trends, mitigation strategies, and security investments.
  • Collaborates with business units, IT, legal and compliance teams to embed risk management into strategic initiatives and projects.
  • Leads and mentor junior analysts, providing guidance on technical skills, risk methodologies, and professional development.
  • Partners with HR to manage staff performance issues/concerns, develop/identify training needs, recruitment processes.

Knowledge/Skills/Abilities:
  • Excellent verbal and written communications at both business and deep technical levels.
  • Strong understanding of and experience with process improvement and process mapping.
  • Strong leadership skills, dependable, curious, matrix-oriented, a visionary, solution oriented, delivers exemplary customer service and quality focused.
  • Excellent interpersonal skills.
  • Self-directed and motivated.
  • The ability to manage multiple tasks.
  • Ability to read and comprehend instructions, correspondence, technical manuals and memos.
  • Ability to respond to common inquiries or complaints from employees, vendors and management staff.
  • Ability to effectively present information to individuals one-on-one or a small group setting.
  • Ability to articulate technical concepts to end-users.
  • Advanced knowledge of TPRM platforms and ability to optimize.
  • Proactive Mindset: Staying ahead of emerging threats and taking initiative in risk mitigation.
  • Strong analytical and problem-solving skills.
  • Attention to Detail: Ability to identify subtle security vulnerabilities and ensure accurate documentation.
  • Adaptability: Capacity to learn and adapt to rapidly evolving security threats and technologies.
  • Teamwork: Willingness to collaborate with other team members for effective risk mitigation.
  • Time Management: Skill in prioritizing tasks and managing workload in a fast-paced environment.

Sutton Bank is an All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, pregnancy, disability or protected veteran status.

Apply